www.3dbaker.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:be:e7:b1:58:e8:78:c7:b0:39:6f:77:7b:2a:e5:ba:02 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.3dbaker.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:be:e7:b1:58:e8:78:c7:b0:39:6f:77:7b:2a:e5:ba:02
Serial Number (int): 305827321831806720435123839624159368165890
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:40:d9:fb:c3:0f:9b:99:9d:1f:5f:86:6c:15:9d:1b:2b:54:6b:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:d9:cc:ca:a3:5d:c5:10:26:2c:23:10:d6:84:e8:c5:1f:1b:7b:79
Fingerprint (sha256): 55:3a:aa:76:36:03:ee:47:98:56:24:0d:63:4a:82:df:66:90:8e:ee:23:5d:42:fd:28:f8:da:d8:f9:4d:ac:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.3dbaker.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.3dbaker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dbaker.com
alaskastemcellcenter.com
aphroditetaxi.com
attorneygeneralsouthdakota.com
atvstarter.com
australiamilkpowder.com
balharbourintl.com
basementhacker.com
bigtext.org
birminghamstemcellclinic.com
boutiquehotelswashingtondc.com
carloanestimator.com
chainmirror.com
cheapresortsnearme.com
cincinnatiprp.com
comingsoonoregon.com
disabilityattorney.co.uk
durahamprp.com
emoneylawyer.com
flordecor.com
gratiscasinobonuser.com
holdmymeme.com
hugeadvisor.com
illuminatedvoices.org
jeannecarter.com
jerseycustodylawyer.com
lincolnstemcellcenter.com
losangelesstemcelldoctor.com
marylandstemcelldoctor.com
mcdonaldsforever.com
mesastemcelldoctor.com
nashvillestemcelldoctor.com
nepalboxing.com
numab.org
offeringonline.com
patriotrouter.com
phoenixairportmap.com
portfolioledger.com
printing-center.com
rehabdr.com
rosenbergplumber.com
royaltrainer.com
salautorepair.com
solar-guard.com
sportsmedicinegainsville.com
stemcellclinicalresearch.com
stpetersburgparking.com
syracuseprp.com
telephonecenter.com
valedatecnologia.com
www.3dbaker.com
www.alaskastemcellcenter.com
www.aphroditetaxi.com
www.attorneygeneralsouthdakota.com
www.atvstarter.com
www.australiamilkpowder.com
www.balharbourintl.com
www.basementhacker.com
www.bigtext.org
www.birminghamstemcellclinic.com
www.boutiquehotelswashingtondc.com
www.carloanestimator.com
www.chainmirror.com
www.cheapresortsnearme.com
www.cincinnatiprp.com
www.comingsoonoregon.com
www.disabilityattorney.co.uk
www.durahamprp.com
www.emoneylawyer.com
www.flordecor.com
www.gratiscasinobonuser.com
www.holdmymeme.com
www.hugeadvisor.com
www.illuminatedvoices.org
www.jeannecarter.com
www.jerseycustodylawyer.com
www.lincolnstemcellcenter.com
www.losangelesstemcelldoctor.com
www.marylandstemcelldoctor.com
www.mcdonaldsforever.com
www.mesastemcelldoctor.com
www.nashvillestemcelldoctor.com
www.nepalboxing.com
www.numab.org
www.offeringonline.com
www.patriotrouter.com
www.phoenixairportmap.com
www.portfolioledger.com
www.printing-center.com
www.rehabdr.com
www.rosenbergplumber.com
www.royaltrainer.com
www.salautorepair.com
www.solar-guard.com
www.sportsmedicinegainsville.com
www.stemcellclinicalresearch.com
www.stpetersburgparking.com
www.syracuseprp.com
www.telephonecenter.com
www.valedatecnologia.com

Other certificates including the domain name 3dbaker.com

(limited to 100 certificates)
ugliestchristmasgifts.com
gratiscasinobonuser.com
luxurture.com
dollardale.com
www.therapistemployment.com
toolkitcase.com
www.digilio.com
syracuseprp.com
barn-wood.com
www.3dbaker.com
www.mesastemcelldoctor.com
nhrco.com
www.christmascaroler.com
www.jacksonvilleboatrepair.com
autopartswholesaler.com
tiickr.com
ensystem.com
www.reddogdemon.com
europeansole.com
relocationexpress.com
malaccantrader.com
tickpuller.com
luifer.com
www.greenvillesportsdoctor.com
carolinasportsdoctor.com

Certificate

The complete raw certificate details for www.3dbaker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/Sx9ocEjqGg5abI7oNS
YoMtB9dXKzCXN13l29sRC6KWnN4DDBU00/8iGMHGDoRfOi7WB/zxsZ6nCqSPToK0
KKzSgXb8WxkkHHvyen7eGGUBnC/eQ/MjZmV4aFTMRBR2iIecY1OFUuqcaHUvilkp
DQj70AWYaiU35uwNSAUwsCFZJAHHdajTrKhwjNEy5jxS+hkEyc2ReBw4i8gLcto6
tutBoyu9i2P7m5ZkvYLhWMkPqiWGAtFOtH3AG2jcikDnoFXHqtV49JNIV8PFjUla
WAwamXiZGf3y7AHyMUfZ3oTaF6QEzLYVICWKufFRMs88//JA/BTfGDyADmVsS5SC
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305827321831806720435123839624159368165890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 23:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 23:12:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.3dbaker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25242086372763751178933471570478617717885018848298565001657614446580125849776671246481635598132875728436412412746087616336444394114906596282610386026361175448269686465000785279617798524400701056624597782419436093509071591187604975355421195205445249576518473310663461350641087717172493668486514792750134063723944406818218503910613819956732488019517027531101599605881869984215790122517663192358431042469217343251131296443172913862883483146284500150472279335418222735192213875029309929813923509253626266012347087903272724200134971038166039250330661066494641208988546746505044887832842473532410644505847472261640484061707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9540d9fbc30f9b999d1f5f866c159d1b2b546b69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dbaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskastemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphroditetaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneygeneralsouthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiamilkpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balharbourintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basementhacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigtext.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghamstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boutiquehotelswashingtondc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carloanestimator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainmirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapresortsnearme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cincinnatiprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comingsoonoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disabilityattorney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durahamprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emoneylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flordecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratiscasinobonuser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdmymeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugeadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illuminatedvoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeannecarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseycustodylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnstemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangelesstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldsforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashvillestemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nepalboxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offeringonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patriotrouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixairportmap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolioledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printing-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rehabdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosenbergplumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaltrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salautorepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinegainsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellclinicalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetersburgparking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syracuseprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telephonecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valedatecnologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dbaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alaskastemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aphroditetaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attorneygeneralsouthdakota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atvstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australiamilkpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basementhacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigtext.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birminghamstemcellclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boutiquehotelswashingtondc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carloanestimator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chainmirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapresortsnearme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincinnatiprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comingsoonoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.disabilityattorney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durahamprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emoneylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flordecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gratiscasinobonuser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdmymeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hugeadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.illuminatedvoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeannecarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseycustodylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnstemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.losangelesstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcdonaldsforever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesastemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nashvillestemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nepalboxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.numab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offeringonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patriotrouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixairportmap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portfolioledger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printing-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rehabdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosenbergplumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaltrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salautorepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solar-guard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinegainsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellclinicalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpetersburgparking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syracuseprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telephonecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valedatecnologia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001716bbb432d0000040300473045022006f21df05b373163309a8d28239b7b6fb433c4752f3140136b5181c988347d62022100f7aad263f3046b2c01f2ae092ae708ef5b5322c80525f58ac14936fecc28825d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001716bbb431700000403004730450221008a50d3eae872abd8f2467f07c174485cae4c93daab7c3167da089e577e26281b022003f465e57e1b2ea6a5e8436f791ad04d287a6e38eb19f18d66b01a652d8b9c5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039546351d17ed1adcae9c2c59c7bbefe9debd6318ec707a304fa718f2dbbe52da7f3bd09dac0abeb58714469b80d45a201d2c3ffff2f544fdedc05794c72994c0641916f3119c52909a8de86d52414f202162e11d90d600b7010f3c842af86786dfec023c90b6afb3ac5a82ddee8ab06fa727844015bbe723e56fbbafbf11cb2c204b328d0ecea538dcebfcd3824f36c7eb741f4ac92a7785a7d8885b88304f1e0f851162fb168bbc5c102262b0a913a72f0b99324a16e8ff763e0366e8f0ae5666a1e23f63001cb79c96dc22661fc46c1e8555a99d654e7bc8097f76ce1eb57f510f7d11d2a26d914b1ab9069a0fc26e7f83a13fcad8578ad41bffbb0319162