san-b1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:f4:51:1e:48:a0:09:d1:92:0b:58:f3:dd:f5:7a:ca:8e was issued on by Let's Encrypt.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:f4:51:1e:48:a0:09:d1:92:0b:58:f3:dd:f5:7a:ca:8e
Serial Number (int): 308280294884692615510530033612456986331790
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:41:cb:93:3c:fc:b9:fd:9f:c8:1c:22:1d:6c:42:f5:7d:13:8e:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:a1:c7:3b:dd:d2:7e:f4:9d:97:bf:66:e7:e9:58:7d:ca:51:0c:ce
Fingerprint (sha256): ec:dc:58:18:92:3c:03:73:33:ec:be:62:c8:db:f1:ce:d5:fa:df:1c:73:4d:95:fb:84:d3:8e:0e:76:84:d9:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b1.granicusgovaccess.net

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.cityoflewisville.com
san-b1.granicusgovaccess.net
www.ankenyiowa.gov
www.arizonamuseumofnaturalhistory.org
www.blacksburg.gov
www.bluecc.edu
www.boonecounty.iowa.gov
www.brentwoodtn.gov
www.bryancountyga.org
www.ccgov.org
www.cedarparktexas.gov
www.ci.punta-gorda.fl.us
www.ci.rolling-hills-estates.ca.us
www.citymb.info
www.cityofalbertville.com
www.cityofclive.com
www.cityoflancasterca.org
www.cityoflewisville.com
www.cityofloveland.org
www.cityofmarion.org
www.cityofmonrovia.org
www.co.marquette.wi.us
www.coffeycountyks.org
www.colleyville.com
www.colleyvillelibrary.com
www.colleyvilleparksandrec.com
www.danapoint.org
www.dedham-ma.gov
www.dsrsd.com
www.eid.org
www.elkgrove.org
www.enid.org
www.falconfieldairport.com
www.lafourchegov.org
www.lauderhill-fl.gov
www.llela.org
www.louisvilleco.gov
www.lowermerion.org
www.lvmwd.com
www.madisoncountyal.gov
www.mahaffie.org
www.mankatomn.gov
www.maplevalleywa.gov
www.marioncountyfl.org
www.marylandheights.com
www.mathewscountyva.gov
www.mcdonoughga.org
www.mchenrycountyil.gov
www.mclgrand.com
www.melbourneflorida.org
www.mesaaz.gov
www.mesacountsoncollege.org
www.mesalibrary.org
www.mesaparks.com
www.mnairspectacular.com
www.nevadadot.com
www.nixa.com
www.olatheks.org
www.olathelibrary.org
www.selectmesa.com
www.verizoncentermn.com
www.visitlewisville.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/L7Jl5qWl7q+3o9Fzpf
UtqNK37ZKTVpKbOD5ESgylYwBRtp80KKvOYGd5c9PLcqekyToqtrRb8F7Fxuf8kd
YG3lIHAhF2E56IVlVPm9/j+wJYKEGKyDRG/ZoOLQT0Z3087BtY4dTXdyZ+ST3DxU
9wAHyUeDWE/9jW39JeDDqdv4IZeMxwgBlgtNZ4XtHW0zAQeMpohKfHwArfa1FXwW
InkIk0DkqWnw/YHlX+0Lin5jGZc3uqFsHx2sEcv4MWzliAQFyKP21VQqTp/HZduW
cNcRj6Uq588vJHTth91jxUrOSNUxgvt1vmnJCzbCAfK+jbeD8L2XAa9aMNG628IC
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308280294884692615510530033612456986331790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-12 15:51:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 15:51:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21201615352857322207118938530426005189229757818590097409772036861510119685133822786039019249445794093088752021111578542851139752604899964279133327913706790874063454787163179424986312919267057903356782660619427539806795053906670524666242981049757394974140644545468059999652353269718698558859034988497520794016572938689207264523565344608896209102915271625818595031999029678006033152016023951206401155669908557233122612505863484923642876221312679904289748371342107207942574968121012992421584519624137266931208099116828172178459945134847548243815095927982378902106100303634697341033926973744252574017663971958800785736299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3941cb933cfcb9fd9fc81c221d6c42f57d138ef8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.cityoflewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankenyiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonamuseumofnaturalhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blacksburg.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluecc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonecounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodtn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryancountyga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cedarparktexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.punta-gorda.fl.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.rolling-hills-estates.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflancasterca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofloveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmarion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmonrovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.marquette.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeycountyks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyvillelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyvilleparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedham-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsrsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconfieldairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafourchegov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauderhill-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llela.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvilleco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisoncountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahaffie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mankatomn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplevalleywa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marioncountyfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathewscountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonoughga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchenrycountyil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclgrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourneflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesacountsoncollege.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnairspectacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olatheks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olathelibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectmesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verizoncentermn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlewisville.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d266317ba000004030048304602210099a5083208345a3687731129937b4a4c96b17220de527c7264be158fc9e9f85c02210098c9114be3a59e18bc4c76d5103da9dfd5feb8a55edb5b52924acb7ce6e0448c007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d2663198f0000040300483046022100fc55b1fed0445c3daf2ed3775614673545085130fb6f853383ef28ad121d89eb022100e48bdc3b2a9bb6503f60e7f8e56a4ff9f0a8ba8c7fa560ec889b46e348898068
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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