www.dakotasportsdoctor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:eb:95:dd:3a:ff:16:30:22:43:df:db:2f:a3:81:3e:af was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.dakotasportsdoctor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:eb:95:dd:3a:ff:16:30:22:43:df:db:2f:a3:81:3e:af
Serial Number (int): 306226994580251756907047458916380398665391
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0f:d5:20:f4:00:e4:25:66:64:e3:23:ac:43:fc:1d:b2:9b:3b:9f:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:d4:ac:d9:fe:e4:2f:d5:7c:d0:ed:da:c4:f9:e7:dd:bd:ac:e6:14
Fingerprint (sha256): 09:50:77:dc:be:02:d4:0c:9a:64:ff:b7:39:a6:42:d6:3a:de:89:8d:37:a0:9e:68:5d:ad:91:31:d6:29:1b:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.dakotasportsdoctor.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dakotasportsdoctor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

7rex.com
aberchain.com
abumalik.com
adultscannabis.com
aguacates.mex.com
b2bshopping.com
barbaramcclintock.com
birchflooring.com
conferencebooth.com
dakotasportsdoctor.com
decadentbaths.com
defectivepretzel.com
descalcificadorelectronico.com
everybodyswims.com
eyesurgerysanfrancisco.com
gamervacation.com
gemcalculator.com
gnarlycannabis.com
graphicaesthetics.com
green-beans.com
hoteldosses.com
houstontrails.com
hudsonvalleycatering.com
improvebehavior.com
kushtoken.com
lankaxgirls.com
learcoin.com
lockscrndeals.com
militaryweaponcases.com
nimblepublishing.com
nocolor.com
omahastar.com
organicwomensclothes.com
parkslopecannabis.com
paxtown.com
politicianpromises.com
primemotoring.com
prplincoln.com
quenchai.com
rackmountframes.com
ratesugar.com
regionbrands.com
ryananddean.com
suitcasecapital.com
telefoniaecellulari.com
thevui.com
tokenfork.com
tracklightingsystem.com
vuijobs.com
wheelmans.com
www.7rex.com
www.aberchain.com
www.abumalik.com
www.adultscannabis.com
www.aguacates.mex.com
www.b2bshopping.com
www.barbaramcclintock.com
www.birchflooring.com
www.conferencebooth.com
www.dakotasportsdoctor.com
www.decadentbaths.com
www.defectivepretzel.com
www.descalcificadorelectronico.com
www.everybodyswims.com
www.eyesurgerysanfrancisco.com
www.gamervacation.com
www.gemcalculator.com
www.gnarlycannabis.com
www.graphicaesthetics.com
www.green-beans.com
www.hoteldosses.com
www.houstontrails.com
www.hudsonvalleycatering.com
www.improvebehavior.com
www.kushtoken.com
www.lankaxgirls.com
www.learcoin.com
www.lockscrndeals.com
www.militaryweaponcases.com
www.nimblepublishing.com
www.nocolor.com
www.omahastar.com
www.organicwomensclothes.com
www.parkslopecannabis.com
www.paxtown.com
www.politicianpromises.com
www.primemotoring.com
www.prplincoln.com
www.quenchai.com
www.rackmountframes.com
www.ratesugar.com
www.regionbrands.com
www.ryananddean.com
www.suitcasecapital.com
www.telefoniaecellulari.com
www.thevui.com
www.tokenfork.com
www.tracklightingsystem.com
www.vuijobs.com
www.wheelmans.com

Other certificates including the domain name dakotasportsdoctor.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.dakotasportsdoctor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINlTCCDH2gAwIBAgISA4Prld06/xYwIkPf2y+jgT6vMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDEwNzM0MjJaFw0y
MDA1MzAwNzM0MjJaMCUxIzAhBgNVBAMTGnd3dy5kYWtvdGFzcG9ydHNkb2N0b3Iu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UWUfN+e80d3VxAS
FpnTNRHc+BR4nnakhkiwSVDdyGZko6Zrqrz/hg5FuOeY53cz+jVARmQzgtoUARFm
YvtHpaGP5BnzRKgx6lM/xFZtooPXbSV6FSVmrGUud6FM0vmAWYacYk8+SU8QsJU+
aoHSPNhgs6kPlMjnkmZfGb4Ub+x8z4ePwXkCe7f7WHTQEC1WTeMFHt1jz/W44mmS
Ar2I8imsKpqKCbIzC4pfExnOaPo/m8MZv7gD0vJ3qaBE1eZnd3xWWgkeSW8sZCBn
lyYtnEZRozNkkSPc5XAytd2rVZg9sZB4b1eYe6L/bFLzjX9bNZtw9rnPKDpoRIeC
EWMBMQIDAQABo4IKmDCCCpQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQP1SD0AOQl
ZmTjI6xD/B2ymzufBDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIITQYDVR0RBIIIRDCCCECCCDdyZXguY29tgg1hYmVy
Y2hhaW4uY29tggxhYnVtYWxpay5jb22CEmFkdWx0c2Nhbm5hYmlzLmNvbYIRYWd1
YWNhdGVzLm1leC5jb22CD2IyYnNob3BwaW5nLmNvbYIVYmFyYmFyYW1jY2xpbnRv
Y2suY29tghFiaXJjaGZsb29yaW5nLmNvbYITY29uZmVyZW5jZWJvb3RoLmNvbYIW
ZGFrb3Rhc3BvcnRzZG9jdG9yLmNvbYIRZGVjYWRlbnRiYXRocy5jb22CFGRlZmVj
dGl2ZXByZXR6ZWwuY29tgh5kZXNjYWxjaWZpY2Fkb3JlbGVjdHJvbmljby5jb22C
EmV2ZXJ5Ym9keXN3aW1zLmNvbYIaZXllc3VyZ2VyeXNhbmZyYW5jaXNjby5jb22C
EWdhbWVydmFjYXRpb24uY29tghFnZW1jYWxjdWxhdG9yLmNvbYISZ25hcmx5Y2Fu
bmFiaXMuY29tghVncmFwaGljYWVzdGhldGljcy5jb22CD2dyZWVuLWJlYW5zLmNv
bYIPaG90ZWxkb3NzZXMuY29tghFob3VzdG9udHJhaWxzLmNvbYIYaHVkc29udmFs
bGV5Y2F0ZXJpbmcuY29tghNpbXByb3ZlYmVoYXZpb3IuY29tgg1rdXNodG9rZW4u
Y29tgg9sYW5rYXhnaXJscy5jb22CDGxlYXJjb2luLmNvbYIRbG9ja3Njcm5kZWFs
cy5jb22CF21pbGl0YXJ5d2VhcG9uY2FzZXMuY29tghRuaW1ibGVwdWJsaXNoaW5n
LmNvbYILbm9jb2xvci5jb22CDW9tYWhhc3Rhci5jb22CGG9yZ2FuaWN3b21lbnNj
bG90aGVzLmNvbYIVcGFya3Nsb3BlY2FubmFiaXMuY29tggtwYXh0b3duLmNvbYIW
cG9saXRpY2lhbnByb21pc2VzLmNvbYIRcHJpbWVtb3RvcmluZy5jb22CDnBycGxp
bmNvbG4uY29tggxxdWVuY2hhaS5jb22CE3JhY2ttb3VudGZyYW1lcy5jb22CDXJh
dGVzdWdhci5jb22CEHJlZ2lvbmJyYW5kcy5jb22CD3J5YW5hbmRkZWFuLmNvbYIT
c3VpdGNhc2VjYXBpdGFsLmNvbYIXdGVsZWZvbmlhZWNlbGx1bGFyaS5jb22CCnRo
ZXZ1aS5jb22CDXRva2VuZm9yay5jb22CF3RyYWNrbGlnaHRpbmdzeXN0ZW0uY29t
ggt2dWlqb2JzLmNvbYINd2hlZWxtYW5zLmNvbYIMd3d3LjdyZXguY29tghF3d3cu
YWJlcmNoYWluLmNvbYIQd3d3LmFidW1hbGlrLmNvbYIWd3d3LmFkdWx0c2Nhbm5h
YmlzLmNvbYIVd3d3LmFndWFjYXRlcy5tZXguY29tghN3d3cuYjJic2hvcHBpbmcu
Y29tghl3d3cuYmFyYmFyYW1jY2xpbnRvY2suY29tghV3d3cuYmlyY2hmbG9vcmlu
Zy5jb22CF3d3dy5jb25mZXJlbmNlYm9vdGguY29tghp3d3cuZGFrb3Rhc3BvcnRz
ZG9jdG9yLmNvbYIVd3d3LmRlY2FkZW50YmF0aHMuY29tghh3d3cuZGVmZWN0aXZl
cHJldHplbC5jb22CInd3dy5kZXNjYWxjaWZpY2Fkb3JlbGVjdHJvbmljby5jb22C
Fnd3dy5ldmVyeWJvZHlzd2ltcy5jb22CHnd3dy5leWVzdXJnZXJ5c2FuZnJhbmNp
c2NvLmNvbYIVd3d3LmdhbWVydmFjYXRpb24uY29tghV3d3cuZ2VtY2FsY3VsYXRv
ci5jb22CFnd3dy5nbmFybHljYW5uYWJpcy5jb22CGXd3dy5ncmFwaGljYWVzdGhl
dGljcy5jb22CE3d3dy5ncmVlbi1iZWFucy5jb22CE3d3dy5ob3RlbGRvc3Nlcy5j
b22CFXd3dy5ob3VzdG9udHJhaWxzLmNvbYIcd3d3Lmh1ZHNvbnZhbGxleWNhdGVy
aW5nLmNvbYIXd3d3LmltcHJvdmViZWhhdmlvci5jb22CEXd3dy5rdXNodG9rZW4u
Y29tghN3d3cubGFua2F4Z2lybHMuY29tghB3d3cubGVhcmNvaW4uY29tghV3d3cu
bG9ja3Njcm5kZWFscy5jb22CG3d3dy5taWxpdGFyeXdlYXBvbmNhc2VzLmNvbYIY
d3d3Lm5pbWJsZXB1Ymxpc2hpbmcuY29tgg93d3cubm9jb2xvci5jb22CEXd3dy5v
bWFoYXN0YXIuY29tghx3d3cub3JnYW5pY3dvbWVuc2Nsb3RoZXMuY29tghl3d3cu
cGFya3Nsb3BlY2FubmFiaXMuY29tgg93d3cucGF4dG93bi5jb22CGnd3dy5wb2xp
dGljaWFucHJvbWlzZXMuY29tghV3d3cucHJpbWVtb3RvcmluZy5jb22CEnd3dy5w
cnBsaW5jb2xuLmNvbYIQd3d3LnF1ZW5jaGFpLmNvbYIXd3d3LnJhY2ttb3VudGZy
YW1lcy5jb22CEXd3dy5yYXRlc3VnYXIuY29tghR3d3cucmVnaW9uYnJhbmRzLmNv
bYITd3d3LnJ5YW5hbmRkZWFuLmNvbYIXd3d3LnN1aXRjYXNlY2FwaXRhbC5jb22C
G3d3dy50ZWxlZm9uaWFlY2VsbHVsYXJpLmNvbYIOd3d3LnRoZXZ1aS5jb22CEXd3
dy50b2tlbmZvcmsuY29tght3d3cudHJhY2tsaWdodGluZ3N5c3RlbS5jb22CD3d3
dy52dWlqb2JzLmNvbYIRd3d3LndoZWVsbWFucy5jb20wTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBep3P531bA
57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAXCVO2YLAAAEAwBGMEQCID5XMbW1
10frdOgkTb5KmTp7nAhP1Jj3FR54RTsYzdRhAiAqHk8F6KbSqHNBdtUWq1eL5iZr
pk7vMyO2BNWwaMDj7gB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06Ic
AAABcJU7ZmAAAAQDAEcwRQIgNmXLgxpzuSj2NV28P6B+0z+43KPAfL/9hvBS6tgF
wKoCIQCYbue1WNgEnYnmrnTyKno0egTZ2dXKVH1FGooJgLN1RjANBgkqhkiG9w0B
AQsFAAOCAQEAXxfhacS8SSTLQ/dZmPiLun+TCsOTgHFqCBxS2koaK3VY+0P+jOG0
f16toi5yUlKfW0W8xONdNdWBzv9OVfh0xJnT1IT/stqZXsJTKvHavsv3eBjxVQGK
9DsiQHS0fUY1TzjZ5LfZyATr36EHjxjkxM5bz0tMMlZxBxxmrjJRqN6IOgR3AZCU
YjyWMo80bas43SRZhj4s2pCW4BhUIYMaYJigN2T2JxILnh7Q0GbaW5yJ2rT9MXjK
TIs4LiWC6CFRHh4XavePbpn4pj6s2CouOMiaDv+e1hPqyB9UnDDBQAuHsWRDzNFU
LoAYDhrmryGhJzIVX00QeaEl9J++Er9UlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UWUfN+e80d3VxASFpnT
NRHc+BR4nnakhkiwSVDdyGZko6Zrqrz/hg5FuOeY53cz+jVARmQzgtoUARFmYvtH
paGP5BnzRKgx6lM/xFZtooPXbSV6FSVmrGUud6FM0vmAWYacYk8+SU8QsJU+aoHS
PNhgs6kPlMjnkmZfGb4Ub+x8z4ePwXkCe7f7WHTQEC1WTeMFHt1jz/W44mmSAr2I
8imsKpqKCbIzC4pfExnOaPo/m8MZv7gD0vJ3qaBE1eZnd3xWWgkeSW8sZCBnlyYt
nEZRozNkkSPc5XAytd2rVZg9sZB4b1eYe6L/bFLzjX9bNZtw9rnPKDpoRIeCEWMB
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306226994580251756907047458916380398665391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 07:34:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 07:34:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dakotasportsdoctor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29952789468750979321797108752014822046639068607267835698204112599531298139751645810375975030329521241735021031378080929385696482890571311824081461254267625610356546600522610026705743452042099126816566966541355487960988599077741747741222080068780245271255683821372111821235254810750108931816192712100147462469735168146575076208964184122384545771696409436333725810429128233704295813315098363070756294416188701839868030276367690117481184296424909829000431882575055929825118332356436704496500728892821527600101927434466308736271487506064854490455106807008967029980555916160843035863380960563060433121596483852855136158001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fd520f400e4256664e323ac43fc1db29b3b9f04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7rex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abumalik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultscannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aguacates.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bshopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbaramcclintock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birchflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conferencebooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotasportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decadentbaths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defectivepretzel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descalcificadorelectronico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everybodyswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesurgerysanfrancisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamervacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnarlycannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphicaesthetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green-beans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteldosses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudsonvalleycatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'improvebehavior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kushtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lankaxgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockscrndeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militaryweaponcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicwomensclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkslopecannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paxtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politicianpromises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primemotoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prplincoln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quenchai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rackmountframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratesugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regionbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryananddean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitcasecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telefoniaecellulari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracklightingsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuijobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7rex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aberchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abumalik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adultscannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aguacates.mex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2bshopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbaramcclintock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birchflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conferencebooth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dakotasportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.decadentbaths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defectivepretzel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.descalcificadorelectronico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everybodyswims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyesurgerysanfrancisco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamervacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnarlycannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphicaesthetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.green-beans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoteldosses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstontrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonvalleycatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.improvebehavior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kushtoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lankaxgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockscrndeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militaryweaponcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nimblepublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nocolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omahastar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicwomensclothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkslopecannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paxtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.politicianpromises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primemotoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prplincoln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quenchai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rackmountframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratesugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regionbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ryananddean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suitcasecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telefoniaecellulari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokenfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tracklightingsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vuijobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wheelmans.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170953b660b000004030046304402203e5731b5b5d747eb74e8244dbe4a993a7b9c084fd498f7151e78453b18cdd46102202a1e4f05e8a6d2a8734176d516ab578be6266ba64eef3323b604d5b068c0e3ee00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170953b6660000004030047304502203665cb831a73b928f6355dbc3fa07ed33fb8dca3c07cbffd86f052ead805c0aa022100986ee7b558d8049d89e6ae74f22a7a347a04d9d9d5ca547d451a8a0980b37546
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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