avoidsurgery.com

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 3b:94:d0:52:13:8c:65:4b was issued on by GoDaddy.com, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avoidsurgery.com

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:94:d0:52:13:8c:65:4b
Serial Number (int): 4293285395724789067
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 8e:9b:7f:d1:c2:5c:dc:4a:9a:ea:37:67:04:c0:50:a7:e3:a7:18:56
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 58:39:5e:ed:b6:54:b9:33:ec:30:03:3c:38:c1:32:50:54:5c:b2:fe
Fingerprint (sha256): 24:66:b6:d7:a1:2d:21:a7:e0:42:12:1b:87:a8:cf:b8:09:23:e3:e7:c0:f9:06:43:2d:b2:8c:0e:e9:95:02:9a

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s1-6436.crl

Check the revocation status for certificate avoidsurgery.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avoidsurgery.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avoidsurgery.com

Other certificates including the domain name avoidsurgery.com

(limited to 100 certificates)
handysharpener.com
avoidsurgery.com
epicdress.com
www.avoidsurgery.com
avoidsurgery.com
oami.com
execrental.com
cosyrobotics.com
aichaafricanhairbraiding.com

Certificate

The complete raw certificate details for avoidsurgery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHhzCCBm+gAwIBAgIIO5TQUhOMZUswDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjMwNjMwMTM1MjQ5WhcN
MjQwNjMwMTM1MjQ5WjAbMRkwFwYDVQQDExBhdm9pZHN1cmdlcnkuY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3w9whclLl8S5ca9qNzeNCc0Iks6h
MorCpANSBdukKBqdMeyfewwUXfIzYhIEVY7p7kfsvdSFA0zRp9hcgMQsUy5XYYhZ
blDFD1nJSDxf7Cy3iIpqteQ1BoqiQ0G94r+VRaq0nXEY/WYKGCFnUygN6/NIhf3M
fEbhyoUcbtefKfXakzIE+KtL0BXVGGdyb3Hi5wziRSYZwETxzmYHzSo2uvNSXLEY
hWZwviEFOHFvYxkZ4EuVbQdCmHD/sbAKWMQcxQPGvYVbUixCHK8/tYYKQ7G8KrIh
kgKmsvJDBIawp2amd+AQVCz8CrpdVu3+MECo2sdUkneuoGhwZlY21X2G7RKoFYFg
YomcTBoDY2JZlfNIveCM9bni1X7WuzJ7/EfXvxPO+56evj4N/pkRPVHSkCHAhd0a
wIlsw2fCokXF9XYXbuhyLam6o5T+gkbGvvHD0fZbM3go2eModtTrh6l3F0i+kulK
qzsDe1xV6fW4iGc3Jc44oAc8Jxwz7AuO05MfyKhCIzih8c3GUujE/5CcPs9DMa9y
vsLsfa+tEggWp69Rb3B3HdsOrdI2VMgZzstqSyub0kPnbXXtRUlaDfyuBVlv6pXL
viM9K9djMQSVA+wGmcFKXH3MS5ZYPa0qN6N53C98A2KFSDQwCI/agiHWGK/7vKGQ
JUFHafKi8FXMA1MCAwEAAaOCAzMwggMvMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA4BgNVHR8EMTAv
MC2gK6AphidodHRwOi8vY3JsLmdvZGFkZHkuY29tL2dkaWcyczEtNjQzNi5jcmww
XQYDVR0gBFYwVDBIBgtghkgBhv1tAQcXATA5MDcGCCsGAQUFBwIBFitodHRwOi8v
Y2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATB2
BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmdvZGFkZHku
Y29tLzBABggrBgEFBQcwAoY0aHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNv
bS9yZXBvc2l0b3J5L2dkaWcyLmNydDAfBgNVHSMEGDAWgBRAwr0njsw0gzCiM9f7
bLPwtCyAzjAbBgNVHREEFDASghBhdm9pZHN1cmdlcnkuY29tMB0GA1UdDgQWBBSO
m3/RwlzcSprqN2cEwFCn46cYVjCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJDJP1SwAABAMASDBG
AiEAzh/4BIDVgECeDNs1ULWjQgF+ahwSzWnnCE7VGq6nyh0CIQDQh+wZbZlGO2Uy
z6a5K/v413nx3yM9kgyDMJYbxW4RGwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABiQyT9l4AAAQDAEcwRQIhAOJrjlGexkp46LVpLtTM+5cosLK6
2itS+MrySzufrlIdAiBNcS+sUboFPa5xFynAXszgmBs+AD+nKhx1zUAe8bn+UgB3
ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiQyT9sQAAAQDAEgw
RgIhALxZUgy0u9QudISV8w5AkMaOLbJGc0KNCD8BY+LSnz3RAiEAyR54rVYAZ2/C
BTRzMCZZrmoIYMLCjMBUH0XQmOBEr0swDQYJKoZIhvcNAQELBQADggEBAKK+vNSa
UBUSrLr3NyK6um2762tQysAfyJc5dXzo1Kpr9K00xYxBRDo9fDqoju+OL8xRipO8
GnWllZbeykZzqWm4wyNg3G9iKizTDk+ZAntKItGxGtFNWDsEq3G8c143MNks0oKD
oEcUCmSGdufC6JF8j6rIdD0n3J443KjTbIQUM1+3jMwZCCtN/YiRwrJrjuLA9TuU
qKTViol0Qk143LQmZ5Lyyuy8hMPt3GzIKTc+bJNwbcqtTY9QgkrYilaNK7+n2uuo
llN4CC8vQhJ22l7pKPhWV5Lis5iQ6nVOWqTISO10BZQcnPF893ZOfj/Sf6Si8qlE
6oIEEB3nl/B5e04=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3w9whclLl8S5ca9qNzeN
Cc0Iks6hMorCpANSBdukKBqdMeyfewwUXfIzYhIEVY7p7kfsvdSFA0zRp9hcgMQs
Uy5XYYhZblDFD1nJSDxf7Cy3iIpqteQ1BoqiQ0G94r+VRaq0nXEY/WYKGCFnUygN
6/NIhf3MfEbhyoUcbtefKfXakzIE+KtL0BXVGGdyb3Hi5wziRSYZwETxzmYHzSo2
uvNSXLEYhWZwviEFOHFvYxkZ4EuVbQdCmHD/sbAKWMQcxQPGvYVbUixCHK8/tYYK
Q7G8KrIhkgKmsvJDBIawp2amd+AQVCz8CrpdVu3+MECo2sdUkneuoGhwZlY21X2G
7RKoFYFgYomcTBoDY2JZlfNIveCM9bni1X7WuzJ7/EfXvxPO+56evj4N/pkRPVHS
kCHAhd0awIlsw2fCokXF9XYXbuhyLam6o5T+gkbGvvHD0fZbM3go2eModtTrh6l3
F0i+kulKqzsDe1xV6fW4iGc3Jc44oAc8Jxwz7AuO05MfyKhCIzih8c3GUujE/5Cc
Ps9DMa9yvsLsfa+tEggWp69Rb3B3HdsOrdI2VMgZzstqSyub0kPnbXXtRUlaDfyu
BVlv6pXLviM9K9djMQSVA+wGmcFKXH3MS5ZYPa0qN6N53C98A2KFSDQwCI/agiHW
GK/7vKGQJUFHafKi8FXMA1MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4293285395724789067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 13:52:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 13:52:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avoidsurgery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910006673393313075750515933982845180992891437089399343740459313255547713399615543955192067864818522137966501025321090153760023410368042874053514109515178416814875035850517283728962775498209718847049206803370886405716308885881275619919934928225079715581718995050899522902590583193169303100217562246619399048185980127254996411285226780927435713052999468834968988731877358002924252020699652349267250789074635916212832980995808879975175104649670468875427221275038357843085667689078340938157949381763233017701003290620471351991919170829879060636564636202181375870965660233987394840221609071031414635743094725692941595692723132433566597084791331870208218413837994914267533898164824226797272432445818672301724314541594373733465828226095247915719938381934927060947588834010626949721897091244501350370132370370638458982869577045336160890812090315591225273467622200508930616844502646066426823832743488615307827820482355573551082548746887356831112496931060921802137800753225087460556565064650153289128987892866235802131017023037299510975975998597811425579422405629936946298191893587818052318570607881309198514953360193788844310156550025518596630483425639535503950622122666749692576079765234340918630014939600976964348419952798166881838077576019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s1-6436.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avoidsurgery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e9b7fd1c25cdc4a9aea376704c050a7e3a71856
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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