www.rafaelmarquez.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0c:33:7e:a6:8a:e3:28:93:30:22:d0:99:e0:a0:34:4b:81 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rafaelmarquez.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:33:7e:a6:8a:e3:28:93:30:22:d0:99:e0:a0:34:4b:81
Serial Number (int): 265488694433404990381715307049869666175873
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:b1:b7:bf:1e:9a:1b:c0:50:14:44:ce:ff:e2:86:f6:92:83:de:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:42:48:72:59:be:17:21:03:df:5a:16:02:84:a7:87:cb:d6:8a:db
Fingerprint (sha256): 03:c7:70:20:6e:13:b5:1d:ae:ba:be:1a:d9:35:e3:75:34:f7:70:0e:1e:11:b5:cf:6f:1f:91:57:9d:15:e8:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rafaelmarquez.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rafaelmarquez.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlantainteriors.co
attireopportunity.com
baby-photography.com
birthinjuriesandthelaw.com
casinojokerit.com
crystalscent.com
danjiangkou.com
dogseat.com
duriflex.com
erikrodriguez.com
exceldairy.com
hava.kitchen
hilodentistry.com
inventsys.com
islbetting.in
islipdentistry.com
jedi-knight.com
lakeview-tv.com
medleypay.com
medrex.com
mylightbody.com
neoputty.com
neotablet.com
neotray.com
nordvindenergy.com
onwrist.com
organicbeeswax.com
paperbot.com
rafaelmarquez.com
renta-car.deals
sanjosestemcelltreatment.com
sleepy-tv.com
squeezeasmiley.com
tennesseestemcelltreatment.com
tmkt.com
trucksys.com
www.atlantainteriors.co
www.attireopportunity.com
www.baby-photography.com
www.birthinjuriesandthelaw.com
www.casinojokerit.com
www.crystalscent.com
www.danjiangkou.com
www.dogseat.com
www.duriflex.com
www.erikrodriguez.com
www.exceldairy.com
www.hava.kitchen
www.hilodentistry.com
www.inventsys.com
www.islbetting.in
www.islipdentistry.com
www.jedi-knight.com
www.lakeview-tv.com
www.medleypay.com
www.medrex.com
www.mylightbody.com
www.neoputty.com
www.neotablet.com
www.neotray.com
www.nordvindenergy.com
www.onwrist.com
www.organicbeeswax.com
www.paperbot.com
www.rafaelmarquez.com
www.renta-car.deals
www.sanjosestemcelltreatment.com
www.sleepy-tv.com
www.squeezeasmiley.com
www.tennesseestemcelltreatment.com
www.tmkt.com
www.trucksys.com

Other certificates including the domain name rafaelmarquez.com

(limited to 100 certificates)
www.rafaelmarquez.com
www.ez.hn
paperbot.com
organicbabyformula.in
www.etcist.com
candy-bouquets.com
realtorparkcity.com
www.rockspringsdentistry.com
www.swagability.com
rafaelmarquez.com
healthcareattorney.net
2wheelerinsurance.co.in
www.rosinpouch.com
lampungclubbers.com
cargomats.net
www.massagetherapyportland.com
www.losangelessportsdoctors.com
rafaelmarquez.com
exceldairy.com
womenwarriors.co.in
www.rafaelmarquez.com
www.designerluxury.com
topshopper.co
www.icitout.tv
www.flexxenergy.com
www.travel-itinerary.com

Certificate

The complete raw certificate details for www.rafaelmarquez.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eE6w2+w4GALDUwtln1k
p9QoNKp6vsqhwPjLMmi4FpsZgDKQWjf8eq/81XDALY/GNpgIjnyxj1gewIm/yBhE
pxJIpVrd3O2tORCS62wx86qp09jMKcRF5o80OuSpu40C3QlvCTCdHOJh/hbQTQmq
9E9Ng+NxhWC1cq52sXXYCwY3/CdBws7kYp/0LGsym/jhai+kBP2vFjZc54SHuD3p
hiCTj763vwAPHvEM54/03JOwDusDYSgvoVodczaVUtMVaPCRQZmb5ZHiFjqYefZU
bwq30p4x7F3ZIadDRYxCHdV1DCm6rx51hV8XQuc4GIToHwEtSH5QZHT13o7m8hxB
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265488694433404990381715307049869666175873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 01:42:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 01:42:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rafaelmarquez.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30534496324715648037228532358311423400483924517670025139794709714958924656967345425959647557661356662985089334856769767429174809374132271621012059744633941017032822775092713082827792701119659170575857451318086473484371093067621380688179137269732540419846205480252127225734777068221512198336816594686565436119698822913552541123542650347035637336746092216833336624064868879903156458804545169216485418148361407962355611047946480890325232714209179278893821980392083031806728889875984546926695876395602814618407220544366042572046847846331898188607131895054002768200001620780825210562089812822818357389282666860283080491321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62b1b7bf1e9a1bc0501444ceffe286f69283de93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantainteriors.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attireopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthinjuriesandthelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinojokerit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalscent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danjiangkou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogseat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duriflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erikrodriguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exceldairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hava.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islbetting.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islipdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedi-knight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeview-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medleypay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylightbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoputty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neotablet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neotray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordvindenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onwrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicbeeswax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafaelmarquez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renta-car.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjosestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepy-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squeezeasmiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennesseestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trucksys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantainteriors.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attireopportunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baby-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birthinjuriesandthelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinojokerit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crystalscent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danjiangkou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogseat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duriflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erikrodriguez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exceldairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hava.kitchen'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hilodentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inventsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islbetting.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islipdentistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jedi-knight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeview-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medleypay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medrex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylightbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neoputty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neotablet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neotray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordvindenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onwrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicbeeswax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paperbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rafaelmarquez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renta-car.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanjosestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sleepy-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squeezeasmiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennesseestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trucksys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c2701dcd0000004030047304502203dbd459b89f7702b35aa74d6c1c82ccce9674c0bf48147ae1e640eba01c8bf9c0221008c262d14e171638cf66235723ed4001e25dfcc6844241e15663b4cc126f54d08007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c2701daff0000040300483046022100c5b53c7ff9324a2fda8a6ae6db8ec3699151b2042e928906468e974ef283012b02210091d39213ff58646eafa32d0f1e97e4cd102557efcf4f4b12a89b05e247e5f099
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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