sportsmedicinesaltlake.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bd:a2:1b:33:7e:e6:47:ac:3f:d1:4b:68:69:ef:9d:54:3a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportsmedicinesaltlake.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bd:a2:1b:33:7e:e6:47:ac:3f:d1:4b:68:69:ef:9d:54:3a
Serial Number (int): 412977987246887599455278647237279662036026
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:44:87:96:be:41:1a:6f:d5:a0:97:86:9e:6d:03:7c:81:c1:52:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:b5:8a:4f:be:c8:9d:af:4e:42:ab:c2:fd:25:9d:f8:a6:a6:ef:3e
Fingerprint (sha256): 1f:36:fe:04:bf:bd:29:9a:1f:53:bc:b1:09:63:63:dd:71:e9:4a:57:46:67:0e:5d:57:d6:08:ed:af:4f:09:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportsmedicinesaltlake.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportsmedicinesaltlake.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accident-advice.com
agrovator.com
blackhillssportsdoctor.com
bugbasedfood.com
bumblebeas.com
buyaide.com
buybitcoins.world
callerringbacktone.com
camphorror.com
carefortheworld.com
daveaiello.org
detraibile.com
dia7.com
domaineducator.com
europaorientale.com
globalfusionweb.com
injurylawyers.melbourne
inmuebles.global
jointpainomaha.com
kansascitysportsdoctor.com
lekennediafoundation.org
loreoftheland.com
mechapolice.com
mesastemcelldoctor.com
mesotheliomas.org
munchieshound.com
namearmour.com
netai.com
njenergychoice.com
oilword.com
omahasportsdoctor.com
poisonivyfieldguide.com
prpsaltlake.com
ratingvegas.com
sneakyline.com
sportsdoctorscalifornia.com
sportsmedicinesaltlake.com
stagedramas.com
stimatchmaker.co.uk
surewind.com
tacas.com
thecozycottage.com
tobaccine.com
travail.click
universityparttime.com
viadyne.com
womensathleticclub.com
www.accident-advice.com
www.agrovator.com
www.blackhillssportsdoctor.com
www.bugbasedfood.com
www.bumblebeas.com
www.buyaide.com
www.buybitcoins.world
www.callerringbacktone.com
www.camphorror.com
www.carefortheworld.com
www.daveaiello.org
www.detraibile.com
www.dia7.com
www.domaineducator.com
www.europaorientale.com
www.globalfusionweb.com
www.injurylawyers.melbourne
www.inmuebles.global
www.jointpainomaha.com
www.kansascitysportsdoctor.com
www.lekennediafoundation.org
www.loreoftheland.com
www.mechapolice.com
www.mesastemcelldoctor.com
www.mesotheliomas.org
www.munchieshound.com
www.namearmour.com
www.netai.com
www.njenergychoice.com
www.oilword.com
www.omahasportsdoctor.com
www.poisonivyfieldguide.com
www.prpsaltlake.com
www.ratingvegas.com
www.sneakyline.com
www.sportsdoctorscalifornia.com
www.sportsmedicinesaltlake.com
www.stagedramas.com
www.stimatchmaker.co.uk
www.surewind.com
www.tacas.com
www.thecozycottage.com
www.tobaccine.com
www.travail.click
www.universityparttime.com
www.viadyne.com
www.womensathleticclub.com
www.xavierbertrand.com
www.xn--by-xkab.com
www.ycjyjg58.com
xavierbertrand.com
xn--by-xkab.com
ycjyjg58.com

Other certificates including the domain name sportsmedicinesaltlake.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sportsmedicinesaltlake.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgJU/k9lBBEPZ0mqEQ92
PqsuUQxIUCAIBTejReiUQbgAr/KCu88/tJcZUsFedhjkfGvjO/sQKCDjvtKTGEs9
Z51zbt0VaMx2tuYJO8USbw3d0ej3cntEZB+3jwYWkkFbcJh+QrMlLf8SKuijRkb7
BGYWHG63augiuts+UXaVHlo2aCA3fLU3O6f5zHFdz0O+6XiIGycN/db27OTnxzxj
TeUFh9Zn37jQHkYQvVZuOE+SiwYg4fj6hKQ3u3NPfLE5b/zOwPauKlADBHWEMDso
uH0n1B1rM3dI6JVM19WajaKwnulKsjIiUdF41kqHVmwDGU8WDqcoNOCmUHbmBAqF
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412977987246887599455278647237279662036026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 22:27:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 22:27:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportsmedicinesaltlake.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24491381118169421059900576490065392733366294785113741503984772376085417471495637001331537671368944240830391670020952236796506667101543804595455879871274727050771273124588125762767005124061548132020809323794627140971434122315685490897775050278718291809000279353121205878333465119224093121617031370828047526858064165531533017963384428281876357332798782802552328778014419328889160186532746457740588240672051068914448000488275016087159841098686503584553398493295544955594720977619686243221659744828574598381509785170445533062947941898461606942769750730528031845328659242103282180361491443448871467107365090828354585265419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a448796be411a6fd5a097869e6d037c81c152a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accident-advice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrovator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackhillssportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugbasedfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumblebeas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buybitcoins.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callerringbacktone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camphorror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carefortheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daveaiello.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detraibile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dia7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaineducator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europaorientale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalfusionweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'injurylawyers.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmuebles.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansascitysportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekennediafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loreoftheland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechapolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesotheliomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munchieshound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namearmour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njenergychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omahasportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyfieldguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpsaltlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratingvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sneakyline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorscalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinesaltlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagedramas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimatchmaker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surewind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecozycottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travail.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityparttime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viadyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womensathleticclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accident-advice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrovator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackhillssportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bugbasedfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bumblebeas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyaide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buybitcoins.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callerringbacktone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camphorror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carefortheworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daveaiello.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.detraibile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dia7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domaineducator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.europaorientale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.globalfusionweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.injurylawyers.melbourne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inmuebles.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansascitysportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lekennediafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loreoftheland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechapolice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesotheliomas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.munchieshound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.namearmour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njenergychoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oilword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omahasportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivyfieldguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prpsaltlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratingvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sneakyline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorscalifornia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinesaltlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagedramas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimatchmaker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surewind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tacas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecozycottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tobaccine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travail.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universityparttime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viadyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womensathleticclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xavierbertrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--by-xkab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ycjyjg58.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xavierbertrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--by-xkab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ycjyjg58.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd1bf573f00000403004630440220200198644345fd062bf9546b6afd458adcf7bde22c7e74c4b4fffb5b35fb877002201df2399392351f3dfbe3906f60a832dd76f17432f38b53156bdf8ed8847600810076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd1bf59670000040300473045022100e11ebaa488ac6066a012e88801ae9c809f9d4f947497b528e0df470d7718b68502205fbe6240b0f92526a026d32998efe7bc3943d464c2cc660c2d4477e46c2bec5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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