san-b1.granicusgovaccess.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:65:f8:e5:bf:df:e6:15:61:a4:03:1d:0e:b0:cd:eb:1a:f7 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-b1.granicusgovaccess.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:f8:e5:bf:df:e6:15:61:a4:03:1d:0e:b0:cd:eb:1a:f7
Serial Number (int): 383148504256670356947249669743805742127863
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:f5:8d:60:3a:4e:5c:e1:8f:60:fa:8a:5d:9a:44:8d:af:20:10:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 23:3b:d5:5b:1b:61:da:99:dd:88:63:87:1d:bb:4f:60:bc:10:46:93
Fingerprint (sha256): fc:b5:78:d9:ff:64:c9:9e:f4:44:24:63:21:61:84:dd:52:f3:97:79:1f:69:e0:f5:b8:bd:e7:7d:b2:d1:9e:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san-b1.granicusgovaccess.net

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-b1.granicusgovaccess.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

library.cityoflewisville.com
san-b1.granicusgovaccess.net
www.ankenyiowa.gov
www.arizonamuseumofnaturalhistory.org
www.blacksburg.gov
www.bluecc.edu
www.boonecounty.iowa.gov
www.bozeman.net
www.bozemanlibrary.org
www.brentwoodtn.gov
www.bryancountyga.org
www.ccgov.org
www.cedarparktexas.gov
www.citymb.info
www.cityofalbertville.com
www.cityofclive.com
www.cityoflancasterca.org
www.cityoflewisville.com
www.cityofloveland.org
www.cityofmarion.org
www.cityofmonrovia.org
www.co.marquette.wi.us
www.coffeycountyks.org
www.colleyville.com
www.colleyvillelibrary.com
www.colleyvilleparksandrec.com
www.danapoint.org
www.dedham-ma.gov
www.deltadiablo.org
www.dsrsd.com
www.eid.org
www.elkgrove.org
www.enid.org
www.falconfieldairport.com
www.lafourchegov.org
www.lauderhill-fl.gov
www.llela.org
www.louisvilleco.gov
www.lowermerion.org
www.lvmwd.com
www.madisoncountyal.gov
www.mahaffie.org
www.mankatomn.gov
www.maplevalleywa.gov
www.marioncountyfl.org
www.marylandheights.com
www.mathewscountyva.gov
www.mcdonoughga.org
www.mchenrycountyil.gov
www.mclgrand.com
www.melbourneflorida.org
www.mesaaz.gov
www.mesacountsoncollege.org
www.mesalibrary.org
www.mesaparks.com
www.mnairspectacular.com
www.nevadadot.com
www.nixa.com
www.olatheks.org
www.olathelibrary.org
www.selectmesa.com
www.verizoncentermn.com
www.visitlewisville.com

Other certificates including the domain name granicusgovaccess.net

(limited to 100 certificates)
san-b1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-z1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-a1.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-c1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-d1.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-f2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e1.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-c2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-f1.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-d2.granicusgovaccess.net
san-b1.granicusgovaccess.net
san-g1.granicusgovaccess.net
san-a2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-b2.granicusgovaccess.net
san-g2.granicusgovaccess.net
san-h1.granicusgovaccess.net
san-d1.granicusgovaccess.net

Certificate

The complete raw certificate details for san-b1.granicusgovaccess.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnMlU4VkwtRc1XfIe4Yk
ADJGyM1SSRKjErlBNJ0llfxVpeeVrJiHaAB4npoAqQUNCXJj061RV+ShYeVwV284
hYzk+ZVl3jw5wC5Nbt0dY6naUFQxnQ8ax4D2TpkDAShoQ0Md8iOKsaklHMAKPrEq
pIh4qmw9nqTT4QriYD9A1jT5gfE618ScKvPgp5HQj0I+yvGKcFEGXwDa/fCIBozN
jvMaOkXsjkgk9EaV9n3+kRV2FzyHapPiW0IKO52gYavnVGnRSeEuIWP4ag9ln6nP
ibZb2LwHWHgfy1N+NXi8r5WuZsJs/FcXz5AJ4ss06e+TdDYNYbXhpu6B6Zw7pwJP
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383148504256670356947249669743805742127863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-09 21:56:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 21:56:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-b1.granicusgovaccess.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21517292357249657578476540268739704783984501575443511494649210993057360464174356758679966790914658272811065584065228865531588821614571926788155130171025210536491142984161931054186049171189791444167341342774635692857761835352569638420507690190848104675616522443489701092687837616429503041662224420776090911313846313042000205212608542498261836008354984662517790180300935657826826382816121973190826755734324709024630592127082608652506664757526059205992267168683787477950289746995340049013764032431994988186429373483071914585570079181153539890483307865190410726887443296466673556256087141968918026842585154744878322831217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ef58d603a4e5ce18f60fa8a5d9a448daf201067
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.cityoflewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-b1.granicusgovaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ankenyiowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonamuseumofnaturalhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blacksburg.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluecc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boonecounty.iowa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bozeman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bozemanlibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brentwoodtn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryancountyga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccgov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cedarparktexas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citymb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofalbertville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflancasterca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityoflewisville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofloveland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmarion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmonrovia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co.marquette.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeycountyks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyvillelibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colleyvilleparksandrec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danapoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dedham-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltadiablo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsrsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkgrove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falconfieldairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafourchegov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lauderhill-fl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llela.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvilleco.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowermerion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvmwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madisoncountyal.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahaffie.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mankatomn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maplevalleywa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marioncountyfl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandheights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mathewscountyva.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonoughga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchenrycountyil.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclgrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melbourneflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaaz.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesacountsoncollege.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesalibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnairspectacular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadadot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olatheks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olathelibrary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selectmesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.verizoncentermn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitlewisville.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016bd8f3dc460000040300473045022100ed79a04062ed0bac50061b6d11d268ef0a856d60458d9de6a54cc8afde5f917102204b00f50b75efbf6a1cf48955021765ea6eb9478a47cb907a39904e0bfc92403d00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bd8f3dc14000004030046304402204930baa14da4729b1a62b31d1ecd384916c013fc1861595c99620135b3a740be022060d53cbb92428d2ac3285a5b65a177fc547f1f07eb59582544ab11e63ebcd427
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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