www.minnesotapatentattorneys.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e4:27:f6:58:e0:ef:7a:f2:13:12:58:b9:03:9d:2f:df:c5 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.minnesotapatentattorneys.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:27:f6:58:e0:ef:7a:f2:13:12:58:b9:03:9d:2f:df:c5
Serial Number (int): 338974356452790789970164978365755984699333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:99:b0:c0:67:80:cf:e0:fd:2f:f2:d4:54:25:34:f1:15:a8:51:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:60:1f:a6:63:b6:c8:48:99:fc:c8:ca:4a:68:4f:ab:0c:c3:39:90
Fingerprint (sha256): 27:7e:2e:84:62:69:db:e8:40:82:33:ce:1d:ca:6e:be:db:d0:a9:db:5b:19:14:54:99:18:41:59:d8:cd:8a:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.minnesotapatentattorneys.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.minnesotapatentattorneys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alabamacaraccidentattorneys.com
arkansasautoaccidentlawyer.com
arkansasnursinghomeattorney.com
arkansaspatentattorneys.com
cacaraccidentalattorney.com
cacaraccidentattorneys.com
daviscaraccidentlawyer.com
delawarenursinghomelawyer.com
hawaiinursinghomelawyer.com
hawaiipatentattorneys.com
idahonursinghomeattorney.com
illinoisautoaccidentlawyers.com
iowanursinghomelawyer.com
kansasnursinghomeattorneys.com
minnesotapatentattorneys.com
mississippimedicalmalpracticeattorney.com
missourimedicalmalpracticelawyers.com
montanaautoaccidentlawyer.com
nevadanursinghomeattorney.com
nevadanursinghomelawyer.com
newhampshireautoaccidentattorneys.com
newhampshirecaraccidentattorneys.com
newhampshirecaraccidentlawyers.com
newjerseynursinghomeattorney.com
northdakotapatentattorneys.com
northdakotapatentlawyers.com
oklahomacaraccidentattorneys.com
rhodeislandautoaccidentattorneys.com
www.alabamacaraccidentattorneys.com
www.arkansasautoaccidentlawyer.com
www.arkansasnursinghomeattorney.com
www.arkansaspatentattorneys.com
www.cacaraccidentalattorney.com
www.cacaraccidentattorneys.com
www.daviscaraccidentlawyer.com
www.delawarenursinghomelawyer.com
www.hawaiinursinghomelawyer.com
www.hawaiipatentattorneys.com
www.idahonursinghomeattorney.com
www.illinoisautoaccidentlawyers.com
www.iowanursinghomelawyer.com
www.kansasnursinghomeattorneys.com
www.minnesotapatentattorneys.com
www.mississippimedicalmalpracticeattorney.com
www.missourimedicalmalpracticelawyers.com
www.montanaautoaccidentlawyer.com
www.nevadanursinghomeattorney.com
www.nevadanursinghomelawyer.com
www.newhampshireautoaccidentattorneys.com
www.newhampshirecaraccidentattorneys.com
www.newhampshirecaraccidentlawyers.com
www.newjerseynursinghomeattorney.com
www.northdakotapatentattorneys.com
www.northdakotapatentlawyers.com
www.oklahomacaraccidentattorneys.com
www.rhodeislandautoaccidentattorneys.com

Other certificates including the domain name minnesotapatentattorneys.com

(limited to 100 certificates)
www.njduiattorneys.com
www.arkansasautoaccidentlawyer.com
www.minnesotapatentattorneys.com
www.montanaautoaccidentlawyer.com
thegulflawyer.com
www.mediaandentertainmentlaw.com
www.cacaraccidentattorneys.com
www.rhodeislandtitlecompany.com
nebraskaautoaccidentattorneys.com
northdakotapatentattorneys.com
easelfortwo.com
www.multipartpayments.com
monogrammedbabygifts.com
www.yumdeserts.com
www.nebraskaautoaccidentattorneys.com
www.oilsprayers.com
www.in-money-out.com
www.gametourneys.com
www.hobbstermlimits.com

Certificate

The complete raw certificate details for www.minnesotapatentattorneys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM3zCCC8egAwIBAgISA+Qn9ljg73ryExJYuQOdL9/FMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTExNTUyMjVaFw0x
OTEwMDkxNTUyMjVaMCsxKTAnBgNVBAMTIHd3dy5taW5uZXNvdGFwYXRlbnRhdHRv
cm5leXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswEqQ7/U
15HlYUkm1LJI4cJP9oVFOTOqDi2ltV04EDOrt3bcHDWDlOqXk+b6mLIgpQ/FFEov
yQDUqOqVTCudlj6gBSACZVeDRonRu7MTt6QzNfNwRfBkMAb/JoHFlU/EZVSCn0lI
xFl+3AaQ1Di7VR+oGp72DFeYneo4PzJhFBnVGnTvlvdcJUP3Gjm1S7t5X87nG+ut
Qw16gqwaQL5X46LPy+YXOm5mTC1dAVNkZkDfRxdhlKJQMAjak7SiKvINAm8sdpWn
mw2NBHZcpJa1s03n8ipOT8eC+1EhLrVALBx5hVVg0GAeE1hmU1058T9CrGSPCzLp
xDAE3P72vXBQVwIDAQABo4IJ3DCCCdgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ6
mbDAZ4DP4P0v8tRUJTTxFahRGjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMIIHjwYDVR0RBIIHhjCCB4KCH2FsYWJhbWFj
YXJhY2NpZGVudGF0dG9ybmV5cy5jb22CHmFya2Fuc2FzYXV0b2FjY2lkZW50bGF3
eWVyLmNvbYIfYXJrYW5zYXNudXJzaW5naG9tZWF0dG9ybmV5LmNvbYIbYXJrYW5z
YXNwYXRlbnRhdHRvcm5leXMuY29tghtjYWNhcmFjY2lkZW50YWxhdHRvcm5leS5j
b22CGmNhY2FyYWNjaWRlbnRhdHRvcm5leXMuY29tghpkYXZpc2NhcmFjY2lkZW50
bGF3eWVyLmNvbYIdZGVsYXdhcmVudXJzaW5naG9tZWxhd3llci5jb22CG2hhd2Fp
aW51cnNpbmdob21lbGF3eWVyLmNvbYIZaGF3YWlpcGF0ZW50YXR0b3JuZXlzLmNv
bYIcaWRhaG9udXJzaW5naG9tZWF0dG9ybmV5LmNvbYIfaWxsaW5vaXNhdXRvYWNj
aWRlbnRsYXd5ZXJzLmNvbYIZaW93YW51cnNpbmdob21lbGF3eWVyLmNvbYIea2Fu
c2FzbnVyc2luZ2hvbWVhdHRvcm5leXMuY29tghxtaW5uZXNvdGFwYXRlbnRhdHRv
cm5leXMuY29tgiltaXNzaXNzaXBwaW1lZGljYWxtYWxwcmFjdGljZWF0dG9ybmV5
LmNvbYIlbWlzc291cmltZWRpY2FsbWFscHJhY3RpY2VsYXd5ZXJzLmNvbYIdbW9u
dGFuYWF1dG9hY2NpZGVudGxhd3llci5jb22CHW5ldmFkYW51cnNpbmdob21lYXR0
b3JuZXkuY29tghtuZXZhZGFudXJzaW5naG9tZWxhd3llci5jb22CJW5ld2hhbXBz
aGlyZWF1dG9hY2NpZGVudGF0dG9ybmV5cy5jb22CJG5ld2hhbXBzaGlyZWNhcmFj
Y2lkZW50YXR0b3JuZXlzLmNvbYIibmV3aGFtcHNoaXJlY2FyYWNjaWRlbnRsYXd5
ZXJzLmNvbYIgbmV3amVyc2V5bnVyc2luZ2hvbWVhdHRvcm5leS5jb22CHm5vcnRo
ZGFrb3RhcGF0ZW50YXR0b3JuZXlzLmNvbYIcbm9ydGhkYWtvdGFwYXRlbnRsYXd5
ZXJzLmNvbYIgb2tsYWhvbWFjYXJhY2NpZGVudGF0dG9ybmV5cy5jb22CJHJob2Rl
aXNsYW5kYXV0b2FjY2lkZW50YXR0b3JuZXlzLmNvbYIjd3d3LmFsYWJhbWFjYXJh
Y2NpZGVudGF0dG9ybmV5cy5jb22CInd3dy5hcmthbnNhc2F1dG9hY2NpZGVudGxh
d3llci5jb22CI3d3dy5hcmthbnNhc251cnNpbmdob21lYXR0b3JuZXkuY29tgh93
d3cuYXJrYW5zYXNwYXRlbnRhdHRvcm5leXMuY29tgh93d3cuY2FjYXJhY2NpZGVu
dGFsYXR0b3JuZXkuY29tgh53d3cuY2FjYXJhY2NpZGVudGF0dG9ybmV5cy5jb22C
Hnd3dy5kYXZpc2NhcmFjY2lkZW50bGF3eWVyLmNvbYIhd3d3LmRlbGF3YXJlbnVy
c2luZ2hvbWVsYXd5ZXIuY29tgh93d3cuaGF3YWlpbnVyc2luZ2hvbWVsYXd5ZXIu
Y29tgh13d3cuaGF3YWlpcGF0ZW50YXR0b3JuZXlzLmNvbYIgd3d3LmlkYWhvbnVy
c2luZ2hvbWVhdHRvcm5leS5jb22CI3d3dy5pbGxpbm9pc2F1dG9hY2NpZGVudGxh
d3llcnMuY29tgh13d3cuaW93YW51cnNpbmdob21lbGF3eWVyLmNvbYIid3d3Lmth
bnNhc251cnNpbmdob21lYXR0b3JuZXlzLmNvbYIgd3d3Lm1pbm5lc290YXBhdGVu
dGF0dG9ybmV5cy5jb22CLXd3dy5taXNzaXNzaXBwaW1lZGljYWxtYWxwcmFjdGlj
ZWF0dG9ybmV5LmNvbYIpd3d3Lm1pc3NvdXJpbWVkaWNhbG1hbHByYWN0aWNlbGF3
eWVycy5jb22CIXd3dy5tb250YW5hYXV0b2FjY2lkZW50bGF3eWVyLmNvbYIhd3d3
Lm5ldmFkYW51cnNpbmdob21lYXR0b3JuZXkuY29tgh93d3cubmV2YWRhbnVyc2lu
Z2hvbWVsYXd5ZXIuY29tgil3d3cubmV3aGFtcHNoaXJlYXV0b2FjY2lkZW50YXR0
b3JuZXlzLmNvbYIod3d3Lm5ld2hhbXBzaGlyZWNhcmFjY2lkZW50YXR0b3JuZXlz
LmNvbYImd3d3Lm5ld2hhbXBzaGlyZWNhcmFjY2lkZW50bGF3eWVycy5jb22CJHd3
dy5uZXdqZXJzZXludXJzaW5naG9tZWF0dG9ybmV5LmNvbYIid3d3Lm5vcnRoZGFr
b3RhcGF0ZW50YXR0b3JuZXlzLmNvbYIgd3d3Lm5vcnRoZGFrb3RhcGF0ZW50bGF3
eWVycy5jb22CJHd3dy5va2xhaG9tYWNhcmFjY2lkZW50YXR0b3JuZXlzLmNvbYIo
d3d3LnJob2RlaXNsYW5kYXV0b2FjY2lkZW50YXR0b3JuZXlzLmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3
AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABa+HzR8oAAAQDAEgw
RgIhAKskdaxsIn215ydJi7vJ5twrZXlajHdnaoGY/kAUua5fAiEA1wRqRqQ2FYJp
WLT5ZP6rgGP9CQ5RxupJn55vNA44wugAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily
3KTDDPTlRUf0eAAAAWvh80e5AAAEAwBHMEUCIQDWufmPYXTINUB4LtwpsoKN+FR8
Hk3Ljkrpje1zzjR2zAIgReqsb5kdVPbDmCHX7qJvHSnH26ZZhKUjA+smD355Zbcw
DQYJKoZIhvcNAQELBQADggEBABw2Qc9wN8qmLjsKxdpLWZJx04rLIz5cH0/Vvenj
3SYcF4Y88BzVDErkuSB0k5ju7v45c6X3n4Fzh2ry1HupV6kdSfe6mwsHjVsHShEB
02qzrGvC56K7EZORUGXlUeMqF+WGd0cID/T9WdbC4omg9nh0Wr6EU8zyeSJETyyX
FdcZXXgGOunz1XlkP/soiQ862CX/J/MONqYcq4d4r9un0V7xYlupiZ8phWiXbTD5
tOlufcUIcdvqjXF7Y+GPKIE7phD6+PnHFICEwOgAfjh5J/FGOBw+yYVaeN9q36n+
voYbzAva7IjkfxIV7hUxOG7+OJdQtEXAQs64Bo/1yiNKDdg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswEqQ7/U15HlYUkm1LJI
4cJP9oVFOTOqDi2ltV04EDOrt3bcHDWDlOqXk+b6mLIgpQ/FFEovyQDUqOqVTCud
lj6gBSACZVeDRonRu7MTt6QzNfNwRfBkMAb/JoHFlU/EZVSCn0lIxFl+3AaQ1Di7
VR+oGp72DFeYneo4PzJhFBnVGnTvlvdcJUP3Gjm1S7t5X87nG+utQw16gqwaQL5X
46LPy+YXOm5mTC1dAVNkZkDfRxdhlKJQMAjak7SiKvINAm8sdpWnmw2NBHZcpJa1
s03n8ipOT8eC+1EhLrVALBx5hVVg0GAeE1hmU1058T9CrGSPCzLpxDAE3P72vXBQ
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338974356452790789970164978365755984699333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 15:52:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 15:52:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.minnesotapatentattorneys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22597231119309706250993887759888164863041446739239522816469317136857892852354752552828659417298511900664945182856680219036233336825679669464908800215465058154834818548482601888754983419470285999978326937974441058559909479433841020069568099051225706487680756112098753542595721470186768169151551441246952470013093541468341467536569311084789747689877638748498546160831826104187053533211413533592932289056630071213219202149149390650973246398784222208036209907669756859499058349572219480545860223627148899346003681018267518261425662973957097737642184974262760825667319604619460392768122469519081360457479295021288759775319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a99b0c06780cfe0fd2ff2d4542534f115a8511a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasautoaccidentlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansasnursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkansaspatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaraccidentalattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daviscaraccidentlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delawarenursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiinursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiipatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahonursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisautoaccidentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowanursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasnursinghomeattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotapatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mississippimedicalmalpracticeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missourimedicalmalpracticelawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montanaautoaccidentlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadanursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadanursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshireautoaccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirecaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshirecaraccidentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseynursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotapatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northdakotapatentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandautoaccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasautoaccidentlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansasnursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arkansaspatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacaraccidentalattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daviscaraccidentlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delawarenursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiinursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiipatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idahonursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illinoisautoaccidentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iowanursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasnursinghomeattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotapatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mississippimedicalmalpracticeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missourimedicalmalpracticelawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montanaautoaccidentlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadanursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadanursinghomelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshireautoaccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshirecaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newhampshirecaraccidentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newjerseynursinghomeattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotapatentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northdakotapatentlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandautoaccidentattorneys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016be1f347ca0000040300483046022100ab2475ac6c227db5e727498bbbc9e6dc2b65795a8c77676a8198fe4014b9ae5f022100d7046a46a43615826958b4f964feab8063fd090e51c6ea499f9e6f340e38c2e8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016be1f347b90000040300473045022100d6b9f98f6174c83540782edc29b2828df8547c1e4dcb8e4ae98ded73ce3476cc022045eaac6f991d54f6c39821d7eea26f1d29c7dba65984a52303eb260f7e7965b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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