mindsavant.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:33:ee:d5:1b:21:58:3c:01:03:ca:43:e2:62:e6:c9:8c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mindsavant.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:33:ee:d5:1b:21:58:3c:01:03:ca:43:e2:62:e6:c9:8c
Serial Number (int): 288288195498774966191819853624953262229900
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:5d:49:c2:42:cc:41:07:9a:55:b7:73:de:40:d8:2a:8a:f1:90:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:d8:39:2d:e2:3e:7f:24:86:89:06:75:27:04:dd:fd:5e:76:e4:0a
Fingerprint (sha256): 34:c8:0e:ac:f6:f3:ff:79:f5:38:42:ec:86:aa:25:5f:f5:dc:7b:5d:a0:fc:d4:75:ef:94:90:b3:f2:d1:90:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mindsavant.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mindsavant.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dstructuresensor.com
arizonasportstherapy.com
atrapados.com
buffalostemcelldoctors.com
butand.com
calcioincostume.com
cedarspancabins.com
cnnrt.com
composite-rack-mount.com
diggay.com
downrobe.com
epatientsurvey.com
eternaltorment.com
exercisebeast.com
goodbyecancer.com
iknowyouseeit.com
intuitionacademy.com
listening-skills.com
lochdhu.com
matcraft.com
meowfpets.com
mindsavant.com
muscle-testing.com
newzealandorganicmanukahoney.com
northcarolinasportstherapy.com
orlandostemcelldoctors.com
ouijafest.com
physicor.com
regenerativedoctors.com
renostemcelltherapy.com
rhodeislandsportstherapy.com
richlandseniorcare.com
robertandwendy.com
rogue-cases.com
securitymanagementsystem.com
shenius.com
shopmacau.com
skyrevolutions.com
spreadmarkets.com
stadiat.com
tank.id
teenage-pregnancy.com
theclarendonhotel.com
toledosportsdoctors.com
trudellpharmacy.com
united-realty-group.com
viatoy.com
virginiastemcellclinics.com
wearasmiley.com
wilanow.com
www.3dstructuresensor.com
www.arizonasportstherapy.com
www.atrapados.com
www.buffalostemcelldoctors.com
www.butand.com
www.calcioincostume.com
www.cedarspancabins.com
www.cnnrt.com
www.composite-rack-mount.com
www.diggay.com
www.downrobe.com
www.epatientsurvey.com
www.eternaltorment.com
www.exercisebeast.com
www.goodbyecancer.com
www.iknowyouseeit.com
www.intuitionacademy.com
www.listening-skills.com
www.lochdhu.com
www.matcraft.com
www.meowfpets.com
www.mindsavant.com
www.muscle-testing.com
www.newzealandorganicmanukahoney.com
www.northcarolinasportstherapy.com
www.orlandostemcelldoctors.com
www.ouijafest.com
www.physicor.com
www.regenerativedoctors.com
www.renostemcelltherapy.com
www.rhodeislandsportstherapy.com
www.richlandseniorcare.com
www.robertandwendy.com
www.rogue-cases.com
www.securitymanagementsystem.com
www.shenius.com
www.shopmacau.com
www.skyrevolutions.com
www.spreadmarkets.com
www.stadiat.com
www.tank.id
www.teenage-pregnancy.com
www.theclarendonhotel.com
www.toledosportsdoctors.com
www.trudellpharmacy.com
www.united-realty-group.com
www.viatoy.com
www.virginiastemcellclinics.com
www.wearasmiley.com
www.wilanow.com

Other certificates including the domain name mindsavant.com

(limited to 100 certificates)
cypherswift.com
www.westvirginiacaraccidentlawyers.com
allarts.com
mindsavant.com
mindsavant.com
www.helloaloha.co
financesavant.com
www.designcosmonaut.com
boca-tv.com
cannabisodour.com
hta1.com
buffalostemcelldoctors.com

Certificate

The complete raw certificate details for mindsavant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzutueJ77bTkkX07Q3by9
95JfaXEbqioyPtaDD9W+Pk69OW1Z+c993RLo1aZCRi4bv+4O31udtEW8nUYRGwdj
BR3tgjG3ookcm/u3wcQyNJV7YErA11MX+xcu9cC07X2Cqi2gQh38+4SYH4ElBVxr
GQ2ltuRJEZU3gTiTvnzH12Wxpy5OvmWPpG7hKLDHg+eGrN4vvo+01X0xHJBKOY4I
wlxgYQOEInZ6cmw2JTejqzBf+VJLneeg54My7VW+AslRdEmU6lMtLzx7irX0GD+t
zA8zyviVQkPB/4GSLqE3onImaergbLnKZxuvlLRYVwXgiCCQXHndxvHEissBOqq+
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288288195498774966191819853624953262229900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-14 10:19:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-12 10:19:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mindsavant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26121186436422812171004947494402161354997052067952217400470070462366240484264631006781841625476494467227134730798676098478725372827495269797111199621871434325047251566658606983856750725647235364231227254178499858106715762110389996547725036237849054453833243473521938650908462785046945143631450389049285762742409329735229356432551312330261256724306841126243022134153065374967944754474416142564233096714941274061135777373783365023094466380435959461344754473582657411056250586157597086130258350312453610650296909207534700721940470047957879245672590269536272373628905022555260154759466731925476208859003389376696280596013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d35d49c242cc41079a55b773de40d82a8af190b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2202 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dstructuresensor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonasportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrapados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffalostemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcioincostume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarspancabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnnrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'composite-rack-mount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diggay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downrobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epatientsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eternaltorment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exercisebeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodbyecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iknowyouseeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitionacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listening-skills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lochdhu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meowfpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindsavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muscle-testing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandorganicmanukahoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolinasportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandostemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijafest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regenerativedoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renostemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodeislandsportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richlandseniorcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertandwendy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogue-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitymanagementsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopmacau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skyrevolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreadmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadiat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tank.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenage-pregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theclarendonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toledosportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trudellpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'united-realty-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viatoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virginiastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearasmiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dstructuresensor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonasportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atrapados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffalostemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calcioincostume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cedarspancabins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnnrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.composite-rack-mount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diggay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.downrobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epatientsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eternaltorment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exercisebeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodbyecancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iknowyouseeit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intuitionacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listening-skills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lochdhu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meowfpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindsavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muscle-testing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandorganicmanukahoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcarolinasportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orlandostemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijafest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.physicor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regenerativedoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renostemcelltherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rhodeislandsportstherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandseniorcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertandwendy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rogue-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securitymanagementsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopmacau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skyrevolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spreadmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadiat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tank.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teenage-pregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theclarendonhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toledosportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trudellpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.united-realty-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viatoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.virginiastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearasmiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilanow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170d8c4f5bd0000040300463044022014d93fbf330236005de6ba840c4da7433c780ed3e860526dbb4868dcbe1565e30220519f1f85b074e41e0f46bc24a961e3f1fa971b2cb7a37a9cb8e169870e240c2a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d8c4f5c60000040300473045022100eda6c3563b63ad24d1de35a3ac7fa2d1a1ad419f3f395b6453ced8e6ae6e90610220777c8d7cfc513492f0aab3ade9b742c6661f3b011bc93281eb43a881cc38a240
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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