san-e2.granicusgovaccess.net

Issued by R3

About this certificate

This digital certificate with serial number 03:6c:44:59:1c:42:a2:cb:af:f1:8e:38:8f:e2:dd:45:f5:a2 was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=san-e2.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:44:59:1c:42:a2:cb:af:f1:8e:38:8f:e2:dd:45:f5:a2
Serial Number (int): 298178203614062788315523259950162667500962
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:7b:9e:00:1a:1c:f7:86:53:61:68:ba:d1:b2:36:bb:09:20:c6:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:c5:87:d2:4a:f8:ac:f1:af:d2:87:85:6e:bf:ba:6c:89:61:a5:9b
Fingerprint (sha256): de:88:0c:81:9c:60:18:85:e6:30:fa:6e:6b:5b:0b:37:04:90:e6:78:05:54:03:68:76:70:0d:41:94:a2:7b:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-e2.granicusgovaccess.net

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-e2.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citycouncil.atlantaga.gov
comnet.cityofmerced.org
gyr.fortlauderdale.gov
intranet.fremont.gov
legislature.rocklandcountyny.gov
san-e2.granicusgovaccess.net
www.albanycounty.com
www.atlantafirerescue.com
www.atlantaga.gov
www.atlantapd.org
www.blendontwp.org
www.brokenarrowok.gov
www.chanhassenmn.gov
www.cityofbartow.net
www.cityofcaseyil.org
www.cityofcashmere.org
www.cityofhialeahgardens.com
www.cityoflacrosse.org
www.cityofmerced.org
www.cityoforting.org
www.cityofsavage.com
www.cityofseward.us
www.clerkofcourt.maricopa.gov
www.colusasutteryolochildsupport.org
www.cottonwoodheights.utah.gov
www.crane-transit.com
www.destinationelsegundo.com
www.douglasvilleconferencecenter.com
www.douglasvillega.gov
www.ed3online.org
www.elsegundo.org
www.elsegundobusiness.com
www.elsegundofd.org
www.elsegundolibrary.org
www.elsegundopd.org
www.elsegundorecparks.org
www.explorecharlescounty.com
www.falconheights.org
www.fay-nccrimestoppers.org
www.fayettevillenc.gov
www.fcpr.us
www.flpd.org
www.flyfay.com
www.flyfxe.com
www.fortlauderdale.gov
www.fremont.gov
www.gillettewy.gov
www.lemont.il.us
www.leonianj.gov
www.longboatkey.org
www.lovevail.org
www.lyonco.org
www.montgomerysheriff.com
www.mundelein.org
www.ncletc.org
www.operationceasefire.com
www.prairiecenter.org
www.reevescounty.org
www.rentershelpline.org
www.smfd.org
www.sunriversharc.com
www.sweetwatertx.gov
www.swiftcurrent.ca
www.tdpud.org
www.villageofschaumburg.com
www.vopnc.org

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-e2.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK2TCCCcGgAwIBAgISA2xEWRxCosuv8Y44j+LdRfWiMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjgxOTA3MjRaFw0yNDAyMjYxOTA3MjNaMCcxJTAjBgNVBAMT
HHNhbi1lMi5ncmFuaWN1c2dvdmFjY2Vzcy5uZXQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT1f7yKP2BIPwzCD7a6uRWKya6ILYk/emkm2Fn3M5tmLap
rr0bQXBmyTGLGCpCecScv53Egtu3kIZBkqThgxo2EIoYhzYWl3a9x5TbyS0MG0Q3
z98dDQqH3qscetiNyjUVvfz+wXDsBpSkW7i/Rn29msBfHGF7gQpdI8bLEttz1ZmP
zHVhUtHgHdSkMPhXbrmOgfAU1c7QoJCjyTBWpHezba3qaN5GBR/pBTq+RkNg6N0x
Yyh3dz5q7X0BkhLVKVU+G47cyQ7Fb33giWvv5cEwLneHaFSxWBPcG+xCnGQZQuwY
YwOymk/rATD/Dia3ijR6j0gSknmEp2GzNwR/XxBTAgMBAAGjggfyMIIH7jAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFPZ7ngAaHPeGU2FoutGyNrsJIMYUMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIF+QYDVR0RBIIF8DCCBeyCGWNpdHljb3VuY2lsLmF0
bGFudGFnYS5nb3aCF2NvbW5ldC5jaXR5b2ZtZXJjZWQub3JnghZneXIuZm9ydGxh
dWRlcmRhbGUuZ292ghRpbnRyYW5ldC5mcmVtb250LmdvdoIgbGVnaXNsYXR1cmUu
cm9ja2xhbmRjb3VudHlueS5nb3aCHHNhbi1lMi5ncmFuaWN1c2dvdmFjY2Vzcy5u
ZXSCFHd3dy5hbGJhbnljb3VudHkuY29tghl3d3cuYXRsYW50YWZpcmVyZXNjdWUu
Y29tghF3d3cuYXRsYW50YWdhLmdvdoIRd3d3LmF0bGFudGFwZC5vcmeCEnd3dy5i
bGVuZG9udHdwLm9yZ4IVd3d3LmJyb2tlbmFycm93b2suZ292ghR3d3cuY2hhbmhh
c3Nlbm1uLmdvdoIUd3d3LmNpdHlvZmJhcnRvdy5uZXSCFXd3dy5jaXR5b2ZjYXNl
eWlsLm9yZ4IWd3d3LmNpdHlvZmNhc2htZXJlLm9yZ4Icd3d3LmNpdHlvZmhpYWxl
YWhnYXJkZW5zLmNvbYIWd3d3LmNpdHlvZmxhY3Jvc3NlLm9yZ4IUd3d3LmNpdHlv
Zm1lcmNlZC5vcmeCFHd3dy5jaXR5b2ZvcnRpbmcub3JnghR3d3cuY2l0eW9mc2F2
YWdlLmNvbYITd3d3LmNpdHlvZnNld2FyZC51c4Idd3d3LmNsZXJrb2Zjb3VydC5t
YXJpY29wYS5nb3aCJHd3dy5jb2x1c2FzdXR0ZXJ5b2xvY2hpbGRzdXBwb3J0Lm9y
Z4Ied3d3LmNvdHRvbndvb2RoZWlnaHRzLnV0YWguZ292ghV3d3cuY3JhbmUtdHJh
bnNpdC5jb22CHHd3dy5kZXN0aW5hdGlvbmVsc2VndW5kby5jb22CJHd3dy5kb3Vn
bGFzdmlsbGVjb25mZXJlbmNlY2VudGVyLmNvbYIWd3d3LmRvdWdsYXN2aWxsZWdh
LmdvdoIRd3d3LmVkM29ubGluZS5vcmeCEXd3dy5lbHNlZ3VuZG8ub3Jnghl3d3cu
ZWxzZWd1bmRvYnVzaW5lc3MuY29tghN3d3cuZWxzZWd1bmRvZmQub3Jnghh3d3cu
ZWxzZWd1bmRvbGlicmFyeS5vcmeCE3d3dy5lbHNlZ3VuZG9wZC5vcmeCGXd3dy5l
bHNlZ3VuZG9yZWNwYXJrcy5vcmeCHHd3dy5leHBsb3JlY2hhcmxlc2NvdW50eS5j
b22CFXd3dy5mYWxjb25oZWlnaHRzLm9yZ4Ibd3d3LmZheS1uY2NyaW1lc3RvcHBl
cnMub3JnghZ3d3cuZmF5ZXR0ZXZpbGxlbmMuZ292ggt3d3cuZmNwci51c4IMd3d3
LmZscGQub3Jngg53d3cuZmx5ZmF5LmNvbYIOd3d3LmZseWZ4ZS5jb22CFnd3dy5m
b3J0bGF1ZGVyZGFsZS5nb3aCD3d3dy5mcmVtb250LmdvdoISd3d3LmdpbGxldHRl
d3kuZ292ghB3d3cubGVtb250LmlsLnVzghB3d3cubGVvbmlhbmouZ292ghN3d3cu
bG9uZ2JvYXRrZXkub3JnghB3d3cubG92ZXZhaWwub3Jngg53d3cubHlvbmNvLm9y
Z4IZd3d3Lm1vbnRnb21lcnlzaGVyaWZmLmNvbYIRd3d3Lm11bmRlbGVpbi5vcmeC
Dnd3dy5uY2xldGMub3Jnghp3d3cub3BlcmF0aW9uY2Vhc2VmaXJlLmNvbYIVd3d3
LnByYWlyaWVjZW50ZXIub3JnghR3d3cucmVldmVzY291bnR5Lm9yZ4IXd3d3LnJl
bnRlcnNoZWxwbGluZS5vcmeCDHd3dy5zbWZkLm9yZ4IVd3d3LnN1bnJpdmVyc2hh
cmMuY29tghR3d3cuc3dlZXR3YXRlcnR4LmdvdoITd3d3LnN3aWZ0Y3VycmVudC5j
YYINd3d3LnRkcHVkLm9yZ4Ibd3d3LnZpbGxhZ2VvZnNjaGF1bWJ1cmcuY29tgg13
d3cudm9wbmMub3JnMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGM
F4smlAAABAMASDBGAiEA1BBNmO2lY45Ya9Ekxl5tAimQjxt/EukuWMQUdlQOkXgC
IQCBoEe1RSWjbzJelUJL43EvY/ZyO9Qp9PGfL9auSfcpvQB1AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjBeLJuUAAAQDAEYwRAIgPWgUxd5x3cPR
lGu3kwyzEIMIfMb/DCl60yK7SwGF7b8CIGWUQC/YDZyD/qDjjVlvIXQc2w8ei79J
dBhSJ1sALaZAMA0GCSqGSIb3DQEBCwUAA4IBAQBfI0rP70VMJvBQCbTBf5+71SCj
8QO3hC7YLS9Z2Ddv4OrarbpsyeyNqF5EFtfahgH1aArv3CkuUH6DbKuDD/5F0e02
nJnd9sQnih1/ugH0nRW2o1aOAP1HLu/MJmuEp3RG6cZiqQa0k47VOx6hsF5QVcz8
y/OBixmoFqdQbEdxBIPZomuf4FXM3cygeCef0DJO/jbvbBQSnj9aRGAQpuTnh73m
COo/VE34aGWq0FqzrZO/96+fNJRdSsDJbxxpJ7RPFfE9uGqaXmcRVjKdYDeh+uCQ
+68siKXQ9WZNqEVOYtTZ62gbTe78dePRsHHf+I7ucZk3T4S4qryd+SW/uEEM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09X+8ij9gSD8Mwg+2urk
VismuiC2JP3ppJthZ9zObZi2qa69G0FwZskxixgqQnnEnL+dxILbt5CGQZKk4YMa
NhCKGIc2Fpd2vceU28ktDBtEN8/fHQ0Kh96rHHrYjco1Fb38/sFw7AaUpFu4v0Z9
vZrAXxxhe4EKXSPGyxLbc9WZj8x1YVLR4B3UpDD4V265joHwFNXO0KCQo8kwVqR3
s22t6mjeRgUf6QU6vkZDYOjdMWMod3c+au19AZIS1SlVPhuO3MkOxW994Ilr7+XB
MC53h2hUsVgT3BvsQpxkGULsGGMDsppP6wEw/w4mt4o0eo9IEpJ5hKdhszcEf18Q
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298178203614062788315523259950162667500962
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 19:07:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 19:07:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-e2.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26741807650515607751224453475907362146927082554168347958216158078733062709056859305281886564689019761724717804573626089339726219518382175739375261471776640172886089533128017911641429567618159293320864570534774236761862075165913661484239079656280638259151278406332337105285364025906871890335254727232955006035160300753752822817152876646335134523916162835731670552059919511465840114002497551265847554430244045938563684962284140213745701904508915984252879894048119349815676563047707482255299534145529732997335213956064621483765934811516883226584238335825545810169688587544390577292241634697916939586248996604910659113043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f67b9e001a1cf786536168bad1b236bb0920c614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1520 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citycouncil.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comnet.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyr.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legislature.rocklandcountyny.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-e2.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albanycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantafirerescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantaga.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantapd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blendontwp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokenarrowok.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chanhassenmn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofbartow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcaseyil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofcashmere.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofhialeahgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflacrosse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmerced.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoforting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofsavage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofseward.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clerkofcourt.maricopa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colusasutteryolochildsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonwoodheights.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crane-transit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationelsegundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvilleconferencecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.douglasvillega.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ed3online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundobusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundofd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundolibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundopd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elsegundorecparks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorecharlescounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconheights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fay-nccrimestoppers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fayettevillenc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcpr.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flpd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyfxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortlauderdale.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fremont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gillettewy.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemont.il.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonianj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longboatkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovevail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyonco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montgomerysheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundelein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncletc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operationceasefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reevescounty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentershelpline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smfd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriversharc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweetwatertx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swiftcurrent.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdpud.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofschaumburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vopnc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c178b26940000040300483046022100d4104d98eda5638e586bd124c65e6d0229908f1b7f12e92e58c41476540e917802210081a047b54525a36f325e95424be3712f63f6723bd429f4f19f2fd6ae49f729bd007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c178b26e5000004030046304402203d6814c5de71ddc3d1946bb7930cb31083087cc6ff0c297ad322bb4b0185edbf02206594402fd80d9c83fea0e38d596f21741cdb0f1e8bbf49741852275b002da640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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