www.smashrewind.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:43:8a:98:cf:3f:f9:a4:d7:d9:c5:37:17:6e:39:58:74:ee was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.smashrewind.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:8a:98:cf:3f:f9:a4:d7:d9:c5:37:17:6e:39:58:74:ee
Serial Number (int): 284320003275051855921078370095938653418734
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:ae:f7:12:bb:70:8d:ce:dd:49:75:a2:36:fb:88:27:29:e5:79:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:77:4d:42:d4:67:21:7f:ce:54:0e:10:2d:f9:26:3f:d2:fc:d5:88
Fingerprint (sha256): 19:1e:fa:b1:df:3f:f8:71:7d:e3:ab:4c:94:0a:be:20:84:5b:81:79:80:1c:8e:0f:ac:73:81:2b:1c:eb:15:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.smashrewind.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.smashrewind.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adairiowa.com
aflfootballtipping.com
aldridgeassoc.com
atatata.com
back-yard.com
boozd.com
coincidenza.com
colostrumresearch.com
container-tracking.com
dailydareah.com
defisaving.com
gmohealthhazard.com
goldcoinetc.com
helloblueworld.com
hentac.com
illineye.com
jointpainsouthbend.com
libve.com
maga4eva.com
mascherate.com
mountisarealestate.com
naturopathclinic.com
nutraself.com
odileague.com
onlinedistribute.com
ottawadentalclinic.com
plantbasedground.com
poisonivypowershield.com
portachiave.com
queenofeclectic.com
ristorantimonza.com
shieldedcomposite.com
smashrewind.com
southafricaexplained.com
steampopfanclub.com
thatsgoodfood.com
thequalityinformationinstitute.com
tickerdoc.com
topekasportsmed.com
www.adairiowa.com
www.aflfootballtipping.com
www.aldridgeassoc.com
www.atatata.com
www.back-yard.com
www.boozd.com
www.coincidenza.com
www.colostrumresearch.com
www.container-tracking.com
www.dailydareah.com
www.defisaving.com
www.gmohealthhazard.com
www.goldcoinetc.com
www.helloblueworld.com
www.hentac.com
www.illineye.com
www.jointpainsouthbend.com
www.libve.com
www.maga4eva.com
www.mascherate.com
www.mountisarealestate.com
www.naturopathclinic.com
www.nutraself.com
www.odileague.com
www.onlinedistribute.com
www.ottawadentalclinic.com
www.plantbasedground.com
www.poisonivypowershield.com
www.portachiave.com
www.queenofeclectic.com
www.ristorantimonza.com
www.shieldedcomposite.com
www.smashrewind.com
www.southafricaexplained.com
www.steampopfanclub.com
www.thatsgoodfood.com
www.thequalityinformationinstitute.com
www.tickerdoc.com
www.topekasportsmed.com

Other certificates including the domain name smashrewind.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.smashrewind.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvOpK+5Mc+Fm60hUal9c
QqDxJXxtlgvpzz7nVE2ft/8S8fQrr6fVIDOMlyAEmGbJ6sthOkmn5ITZ5NVJRPgS
lGWqhYAiLfIDxfQJ9gA+aiFLQ4+gPxulmY/PWeECGkeWCC1ZlziA+QxKm8gxWPmf
6/br6D2NdnPO/Rq3lERLmTtRbVg7OgGfklX4vzrffynrrPuvw4se93lfGMvdxZv4
cqiz3yNNtEimQ/83x+LIMItoiVGJlm71rXlerr6VZVlU3OZHRTJxrWu9MoMVIgH8
pPR2yOLwQk1hT/Cbpxb+7PaN8vJVIdFb8iAmqyYn7vBWqY4jH0qEUtHryiGUe2/2
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284320003275051855921078370095938653418734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 22:26:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 22:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.smashrewind.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25115338015054194890414525331508178821152426788901738198132355683411091209303690535534990821381964357876658917955435700642065123120641381677571451408657938036989564193586639956861994941987442551888635428222333026717415053794894975490329851575387137489459405317888455149832935338829415583260623096128074446204655214157401944779483535559229942317840486259832098174181327222358577002339956328985495867700349390733295952475448615749692880094545256876398391767088290550751024364612606827770803288331385354336666000132650909495182388875673064666585065773187592198965619574789148344392775708640788837268109128982401796535901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2aef712bb708dcedd4975a236fb882729e57934
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adairiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aflfootballtipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aldridgeassoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atatata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-yard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boozd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coincidenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colostrumresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'container-tracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailydareah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defisaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmohealthhazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoinetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helloblueworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illineye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainsouthbend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maga4eva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mascherate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountisarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturopathclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutraself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odileague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinedistribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawadentalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantbasedground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivypowershield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portachiave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenofeclectic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ristorantimonza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shieldedcomposite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smashrewind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southafricaexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steampopfanclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatsgoodfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thequalityinformationinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickerdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topekasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adairiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aflfootballtipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aldridgeassoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atatata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.back-yard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boozd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coincidenza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colostrumresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.container-tracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailydareah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.defisaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmohealthhazard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldcoinetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helloblueworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hentac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illineye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainsouthbend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maga4eva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mascherate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountisarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturopathclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutraself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odileague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinedistribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottawadentalclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantbasedground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivypowershield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portachiave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queenofeclectic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ristorantimonza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shieldedcomposite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smashrewind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafricaexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steampopfanclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thatsgoodfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thequalityinformationinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickerdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topekasportsmed.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e8b23e2030000040300483046022100f74f0c949d67277fac4d191e5bb19fe73c5990e994b2c5dada1f381fcaabd5c3022100d3a3e0c214d20fcae088a8cf2f67e37f24490c67cb1c03f86dd63d3b5e11c8df0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e8b23e3ca0000040300483046022100cc15dc599e197b0ea28ac0b424a56b45c3072d0bf24ead628e3ad6efd89137ba022100a0220592b6f670ea417010e5a26d91465b80bfb85922c763ff4750cf573e0735
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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