www.minnesotasportsdoctors.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:15:fe:c7:f4:18:a4:e0:e4:a9:6c:8a:6e:6e:b7:b2:7f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.minnesotasportsdoctors.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:15:fe:c7:f4:18:a4:e0:e4:a9:6c:8a:6e:6e:b7:b2:7f
Serial Number (int): 322616920527902024189088954455314658734719
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:bd:7b:11:70:39:3d:55:fe:83:19:2c:1a:74:b1:8f:3d:5d:17:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 50:cb:4d:0c:f0:4c:2e:2d:df:7c:87:36:78:b1:82:5c:d7:e3:68:a8
Fingerprint (sha256): 45:ad:42:b6:ac:65:69:e4:12:e7:8f:30:c9:9a:f5:17:24:3e:2b:fb:78:88:b7:d3:0e:c7:01:42:88:2a:db:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.minnesotasportsdoctors.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.minnesotasportsdoctors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dboats.com
4dlandscapes.com
africacashless.com
alaskagoldnuggets.com
alaskastemcellcenters.com
balletpointeshoes.com
buyrentleasedomains.com
camping-trips.com
cheer-uniforms.com
compostspreaders.com
cryptocompetitions.com
dcstemcelldoctors.com
dotmoc.com
fifavr.com
findaddress.com
gamervps.com
gardeninggnomes.com
igamingseminars.com
indiear.com
institutionalwallets.com
keywestbestcharters.com
liabilityliquidators.com
load-master-containers.com
lushtress.com
luvdomains.com
merconmain.com
minnesotasportsdoctors.com
mississippisportsdoctors.com
natural-gemstones.com
newyorkstemcelltreatments.com
office365-filter.email
okeyf.com
partyinthehills.com
personaeffects.com
philadelphiaslots.com
pistolpeeps.com
police-cars.com
promotional-calendars.com
rarecollectiblestamps.com
redappleproperties.com
reddingcars.com
terrex-cases.com
themsomeeats.com
toponlinecasinotips.com
unitedamericafortrump.com
valuewallets.com
vttints.com
wealthcharities.com
westvirginiastemcells.com
www.3dboats.com
www.4dlandscapes.com
www.africacashless.com
www.alaskagoldnuggets.com
www.alaskastemcellcenters.com
www.balletpointeshoes.com
www.buyrentleasedomains.com
www.camping-trips.com
www.cheer-uniforms.com
www.compostspreaders.com
www.cryptocompetitions.com
www.dcstemcelldoctors.com
www.dotmoc.com
www.fifavr.com
www.findaddress.com
www.gamervps.com
www.gardeninggnomes.com
www.igamingseminars.com
www.indiear.com
www.institutionalwallets.com
www.keywestbestcharters.com
www.liabilityliquidators.com
www.load-master-containers.com
www.lushtress.com
www.luvdomains.com
www.merconmain.com
www.minnesotasportsdoctors.com
www.mississippisportsdoctors.com
www.natural-gemstones.com
www.newyorkstemcelltreatments.com
www.office365-filter.email
www.okeyf.com
www.partyinthehills.com
www.personaeffects.com
www.philadelphiaslots.com
www.pistolpeeps.com
www.police-cars.com
www.promotional-calendars.com
www.rarecollectiblestamps.com
www.redappleproperties.com
www.reddingcars.com
www.terrex-cases.com
www.themsomeeats.com
www.toponlinecasinotips.com
www.unitedamericafortrump.com
www.valuewallets.com
www.vttints.com
www.wealthcharities.com
www.westvirginiastemcells.com
www.wyomingsportsdoctors.com
wyomingsportsdoctors.com

Other certificates including the domain name minnesotasportsdoctors.com

(limited to 100 certificates)
igamingseminars.com
fabbriche.com
www.minneapolisstemcells.com
smartexpressglass.com
40782.com
www.heavyhash.com
delinda.live
www.0798q.com
www.minnesotasportsdoctors.com
websots.com
www.dcstemcelldoctors.com
metalexchangemarket.com
www.authenticityopensdoors.com
debtcollectionlaws.com
www.cephaliccarnage.com
alaskagoldnuggets.com
mississippisportsdoctors.com
www.metalexchangemarket.com
modio.co
www.sorprendo.com
www.gamervps.com
understandingfossils.com
www.ejyu.com

Certificate

The complete raw certificate details for www.minnesotasportsdoctors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOWzCCDUOgAwIBAgISA7QV/sf0GKTg5Klsim5ut7J/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTMwMTMzMDFaFw0y
MDA2MTEwMTMzMDFaMCkxJzAlBgNVBAMTHnd3dy5taW5uZXNvdGFzcG9ydHNkb2N0
b3JzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPRs9ayEzAxz
Ugt8dBMIOtcCt3RrVAL6Coc/ZlguwDwo5n3E0w0WKevDM3BTpILYxZzLSSgEk/Wo
Avmv9Apcfh3BPZ/QQ0fZi2xUxYbCISoB3Yo7QhAPtni1OGGqTBqatLYoDD2RzqTH
rHvjjTm1thDZfFqEjF5vl1BcFWM10AiJB0ZS53jLc6B1nHHFZ/+UGqYFnbJ6CXRI
r9gFNyMqbFOGHP1azyzBMIeswakJ+ahC11t+1gpCAjtH7fcr+g69/A5Qk6KYf+nI
qRBYKMuUfbei/PExzliyfUoQIG9rvVTV18WLPVeC8kco5sIM36GUEVbjDDT2k+p2
odNcWsDxfh8CAwEAAaOCC1owggtWMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU7L17
EXA5PVX+gxksGnSxjz1dF0IwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzCCCQ0GA1UdEQSCCQQwggkAggszZGJvYXRzLmNv
bYIQNGRsYW5kc2NhcGVzLmNvbYISYWZyaWNhY2FzaGxlc3MuY29tghVhbGFza2Fn
b2xkbnVnZ2V0cy5jb22CGWFsYXNrYXN0ZW1jZWxsY2VudGVycy5jb22CFWJhbGxl
dHBvaW50ZXNob2VzLmNvbYIXYnV5cmVudGxlYXNlZG9tYWlucy5jb22CEWNhbXBp
bmctdHJpcHMuY29tghJjaGVlci11bmlmb3Jtcy5jb22CFGNvbXBvc3RzcHJlYWRl
cnMuY29tghZjcnlwdG9jb21wZXRpdGlvbnMuY29tghVkY3N0ZW1jZWxsZG9jdG9y
cy5jb22CCmRvdG1vYy5jb22CCmZpZmF2ci5jb22CD2ZpbmRhZGRyZXNzLmNvbYIM
Z2FtZXJ2cHMuY29tghNnYXJkZW5pbmdnbm9tZXMuY29tghNpZ2FtaW5nc2VtaW5h
cnMuY29tggtpbmRpZWFyLmNvbYIYaW5zdGl0dXRpb25hbHdhbGxldHMuY29tghdr
ZXl3ZXN0YmVzdGNoYXJ0ZXJzLmNvbYIYbGlhYmlsaXR5bGlxdWlkYXRvcnMuY29t
ghpsb2FkLW1hc3Rlci1jb250YWluZXJzLmNvbYINbHVzaHRyZXNzLmNvbYIObHV2
ZG9tYWlucy5jb22CDm1lcmNvbm1haW4uY29tghptaW5uZXNvdGFzcG9ydHNkb2N0
b3JzLmNvbYIcbWlzc2lzc2lwcGlzcG9ydHNkb2N0b3JzLmNvbYIVbmF0dXJhbC1n
ZW1zdG9uZXMuY29tgh1uZXd5b3Jrc3RlbWNlbGx0cmVhdG1lbnRzLmNvbYIWb2Zm
aWNlMzY1LWZpbHRlci5lbWFpbIIJb2tleWYuY29tghNwYXJ0eWludGhlaGlsbHMu
Y29tghJwZXJzb25hZWZmZWN0cy5jb22CFXBoaWxhZGVscGhpYXNsb3RzLmNvbYIP
cGlzdG9scGVlcHMuY29tgg9wb2xpY2UtY2Fycy5jb22CGXByb21vdGlvbmFsLWNh
bGVuZGFycy5jb22CGXJhcmVjb2xsZWN0aWJsZXN0YW1wcy5jb22CFnJlZGFwcGxl
cHJvcGVydGllcy5jb22CD3JlZGRpbmdjYXJzLmNvbYIQdGVycmV4LWNhc2VzLmNv
bYIQdGhlbXNvbWVlYXRzLmNvbYIXdG9wb25saW5lY2FzaW5vdGlwcy5jb22CGXVu
aXRlZGFtZXJpY2Fmb3J0cnVtcC5jb22CEHZhbHVld2FsbGV0cy5jb22CC3Z0dGlu
dHMuY29tghN3ZWFsdGhjaGFyaXRpZXMuY29tghl3ZXN0dmlyZ2luaWFzdGVtY2Vs
bHMuY29tgg93d3cuM2Rib2F0cy5jb22CFHd3dy40ZGxhbmRzY2FwZXMuY29tghZ3
d3cuYWZyaWNhY2FzaGxlc3MuY29tghl3d3cuYWxhc2thZ29sZG51Z2dldHMuY29t
gh13d3cuYWxhc2thc3RlbWNlbGxjZW50ZXJzLmNvbYIZd3d3LmJhbGxldHBvaW50
ZXNob2VzLmNvbYIbd3d3LmJ1eXJlbnRsZWFzZWRvbWFpbnMuY29tghV3d3cuY2Ft
cGluZy10cmlwcy5jb22CFnd3dy5jaGVlci11bmlmb3Jtcy5jb22CGHd3dy5jb21w
b3N0c3ByZWFkZXJzLmNvbYIad3d3LmNyeXB0b2NvbXBldGl0aW9ucy5jb22CGXd3
dy5kY3N0ZW1jZWxsZG9jdG9ycy5jb22CDnd3dy5kb3Rtb2MuY29tgg53d3cuZmlm
YXZyLmNvbYITd3d3LmZpbmRhZGRyZXNzLmNvbYIQd3d3LmdhbWVydnBzLmNvbYIX
d3d3LmdhcmRlbmluZ2dub21lcy5jb22CF3d3dy5pZ2FtaW5nc2VtaW5hcnMuY29t
gg93d3cuaW5kaWVhci5jb22CHHd3dy5pbnN0aXR1dGlvbmFsd2FsbGV0cy5jb22C
G3d3dy5rZXl3ZXN0YmVzdGNoYXJ0ZXJzLmNvbYIcd3d3LmxpYWJpbGl0eWxpcXVp
ZGF0b3JzLmNvbYIed3d3LmxvYWQtbWFzdGVyLWNvbnRhaW5lcnMuY29tghF3d3cu
bHVzaHRyZXNzLmNvbYISd3d3Lmx1dmRvbWFpbnMuY29tghJ3d3cubWVyY29ubWFp
bi5jb22CHnd3dy5taW5uZXNvdGFzcG9ydHNkb2N0b3JzLmNvbYIgd3d3Lm1pc3Np
c3NpcHBpc3BvcnRzZG9jdG9ycy5jb22CGXd3dy5uYXR1cmFsLWdlbXN0b25lcy5j
b22CIXd3dy5uZXd5b3Jrc3RlbWNlbGx0cmVhdG1lbnRzLmNvbYIad3d3Lm9mZmlj
ZTM2NS1maWx0ZXIuZW1haWyCDXd3dy5va2V5Zi5jb22CF3d3dy5wYXJ0eWludGhl
aGlsbHMuY29tghZ3d3cucGVyc29uYWVmZmVjdHMuY29tghl3d3cucGhpbGFkZWxw
aGlhc2xvdHMuY29tghN3d3cucGlzdG9scGVlcHMuY29tghN3d3cucG9saWNlLWNh
cnMuY29tgh13d3cucHJvbW90aW9uYWwtY2FsZW5kYXJzLmNvbYIdd3d3LnJhcmVj
b2xsZWN0aWJsZXN0YW1wcy5jb22CGnd3dy5yZWRhcHBsZXByb3BlcnRpZXMuY29t
ghN3d3cucmVkZGluZ2NhcnMuY29tghR3d3cudGVycmV4LWNhc2VzLmNvbYIUd3d3
LnRoZW1zb21lZWF0cy5jb22CG3d3dy50b3BvbmxpbmVjYXNpbm90aXBzLmNvbYId
d3d3LnVuaXRlZGFtZXJpY2Fmb3J0cnVtcC5jb22CFHd3dy52YWx1ZXdhbGxldHMu
Y29tgg93d3cudnR0aW50cy5jb22CF3d3dy53ZWFsdGhjaGFyaXRpZXMuY29tgh13
d3cud2VzdHZpcmdpbmlhc3RlbWNlbGxzLmNvbYIcd3d3Lnd5b21pbmdzcG9ydHNk
b2N0b3JzLmNvbYIYd3lvbWluZ3Nwb3J0c2RvY3RvcnMuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAB7dc
G+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFw0bzjMQAABAMARzBFAiAq
dYHNL9QynsD7V/hnDWlSKb9jOoK5UZLK8/LLYKKAlAIhAJg+kqez21sPgqOzMRvE
cMNRWJqgGg8YUkNrwGEbG4B5AHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y
CJo32RMAAAFw0bzkQQAABAMASDBGAiEA8cAMuQNkndvuPlr2nD1twb462+QHGDH8
DU4mTgYbyeACIQCLoLzYT3cOdC0al29+I0zpwJq0hMhERTuh6Wv1Io3sbzANBgkq
hkiG9w0BAQsFAAOCAQEAORTQY+omn5EN7lXD8w7fatfKic4Q+pSXP6uEb/GOUGAG
nExxnvvNWGq+WbNqchdvFyiI2Zp0FV/Xf92LjxJj0MhCzRS8giJ4ui32cE0/5W4X
9srLwFsVyfB4BKWBoirNEmAQbVHT/C59GAy45MvHPKzNpCi+gMxir+LlBHXIj/Gn
jQwiW4P/hAg1sxQQ2S8RT/3X6iRnaZ+Tdt2tNpx9gYAvfx8uwCQyCR/PWsfOsTzk
IUV5OIc9kWRGUQj2Mq1YKu/o0i2HTs/xQuX3SPd/iv9FSq2d5ao+fQv1ME6qTHWU
NHXNtFQGmx6nhSH8HKI6iZ5QiyqZY+tolwmlh79EVg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Gz1rITMDHNSC3x0Ewg6
1wK3dGtUAvoKhz9mWC7APCjmfcTTDRYp68MzcFOkgtjFnMtJKAST9agC+a/0Clx+
HcE9n9BDR9mLbFTFhsIhKgHdijtCEA+2eLU4YapMGpq0tigMPZHOpMese+ONObW2
ENl8WoSMXm+XUFwVYzXQCIkHRlLneMtzoHWcccVn/5QapgWdsnoJdEiv2AU3Iyps
U4Yc/VrPLMEwh6zBqQn5qELXW37WCkICO0ft9yv6Dr38DlCToph/6cipEFgoy5R9
t6L88THOWLJ9ShAgb2u9VNXXxYs9V4LyRyjmwgzfoZQRVuMMNPaT6nah01xawPF+
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322616920527902024189088954455314658734719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 01:33:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 01:33:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.minnesotasportsdoctors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30855876424422450068311347730062330685567837115141753281555258899499161724660376695513256012505087725567615159282084135435307375285993975540644424445117075573301077021285287098265679518540914794989823618653140580690868727625304359016982359499989069380909307000351453183310655571759461540607982099352786510298921052584478706268431395467682994798805034103890033109805321802556826733612455204818824074209721715486662264193761356166651251124725158730379567435084255115875867400345777719456682108865974054248043451853034984733063722578002050776178963412631640917958747929671311589656868865959013225921238730965179232779807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecbd7b1170393d55fe83192c1a74b18f3d5d1742
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dlandscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africacashless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskagoldnuggets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskastemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balletpointeshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyrentleasedomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camping-trips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheer-uniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compostspreaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocompetitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifavr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findaddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamervps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeninggnomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igamingseminars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutionalwallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestbestcharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liabilityliquidators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'load-master-containers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lushtress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luvdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merconmain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mississippisportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natural-gemstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkstemcelltreatments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office365-filter.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okeyf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyinthehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personaeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philadelphiaslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pistolpeeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'police-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotional-calendars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecollectiblestamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redappleproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddingcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrex-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themsomeeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toponlinecasinotips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedamericafortrump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuewallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vttints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthcharities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westvirginiastemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dlandscapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africacashless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskagoldnuggets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskastemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balletpointeshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyrentleasedomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camping-trips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheer-uniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compostspreaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptocompetitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcstemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotmoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fifavr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findaddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamervps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardeninggnomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igamingseminars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutionalwallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keywestbestcharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liabilityliquidators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.load-master-containers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lushtress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luvdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merconmain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mississippisportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natural-gemstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newyorkstemcelltreatments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.office365-filter.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okeyf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partyinthehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personaeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.philadelphiaslots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pistolpeeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.police-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promotional-calendars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rarecollectiblestamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redappleproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddingcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrex-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themsomeeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toponlinecasinotips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedamericafortrump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valuewallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vttints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wealthcharities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westvirginiastemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomingsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingsportsdoctors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170d1bce331000004030047304502202a7581cd2fd4329ec0fb57f8670d695229bf633a82b95192caf3f2cb60a28094022100983e92a7b3db5b0f82a3b3311bc470c351589aa01a0f1852436bc0611b1b80790077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170d1bce4410000040300483046022100f1c00cb903649ddbee3e5af69c3d6dc1be3adbe4071831fc0d4e264e061bc9e00221008ba0bcd84f770e742d1a976f7e234ce9c09ab484c844453ba1e96bf5228dec6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003914d063ea269f910dee55c3f30edf6ad7ca89ce10fa94973fab846ff18e5060069c4c719efbcd586abe59b36a72176f172888d99a74155fd77fdd8b8f1263d0c842cd14bc822278ba2df6704d3fe56e17f6cacbc05b15c9f07804a581a22acd1260106d51d3fc2e7d180cb8e4cbc73caccda428be80cc62afe2e50475c88ff1a78d0c225b83ff840835b31410d92f114ffdd7ea2467699f9376ddad369c7d81802f7f1f2ec02432091fcf5ac7ceb13ce421457938873d9164465108f632ad582aefe8d22d874ecff142e5f748f77f8aff454aad9de5aa3e7d0bf5304eaa4c75943475cdb454069b1ea78521fc1ca23a899e508b2a9963eb689709a587bf4456