www.sportsmedicinefortcollins.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:24:d7:f0:7e:99:ee:7f:53:25:a4:bb:31:46:86:56:71 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sportsmedicinefortcollins.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:24:d7:f0:7e:99:ee:7f:53:25:a4:bb:31:46:86:56:71
Serial Number (int): 302900279989116767327088349667798630684273
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:9f:d4:94:e8:cd:25:98:81:7c:24:af:2f:56:4f:d5:4f:53:50:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:33:4f:8d:a7:29:d0:32:35:51:2c:8c:ab:e8:c7:75:50:84:54:13
Fingerprint (sha256): 60:69:26:fd:48:41:1a:81:98:82:aa:af:6a:e8:8b:19:e7:c3:a2:6d:a2:84:21:e0:ff:21:b8:8a:57:e4:18:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sportsmedicinefortcollins.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsmedicinefortcollins.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aggettivo.com
americasfinestseafoodrestaurant.com
anchoragestemcelldoctors.com
appnote.org
arieda.com
attyct.com
augustasportsdoctors.com
bambooremovalcontainment.com
cannajam.com
caraman.com
cervaradiroma.com
chadiansignlanguage.bible
custombuiltyacht.com
dixiebuilt.com
drugfreeliving.org
flexmight.com
fridakahlopaintings.com
graphict.com
grow-light.com
holographicdatingsites.com
homecareprograms.com
hotelwk.com
ilmercatodegliaffari.com
jessicanicole.com
joltbros.com
kinetictrainer.com
lilimac.com
louisianasportsdoctors.com
malabarista.com
mexicansignlanguage.bible
militarytotecases.com
ministryofoil.com
nevadasilver.com
newfashionhandbags.com
njpoisonivybambooremoval.org
oklahomacitysportsdoctors.com
picassoprint.com
poisonivybambooremovalnj.com
primerospasos.com
raleighjointpain.com
resalerightsproducts.com
robertbates.com
rotagreca.com
selfresolve.com
shehorn.com
sportsmedicinefortcollins.com
stretchbras.com
tokyo-tattoo.com
vcvestment.com
www.aggettivo.com
www.americasfinestseafoodrestaurant.com
www.anchoragestemcelldoctors.com
www.appnote.org
www.arieda.com
www.attyct.com
www.augustasportsdoctors.com
www.bambooremovalcontainment.com
www.cannajam.com
www.caraman.com
www.cervaradiroma.com
www.chadiansignlanguage.bible
www.custombuiltyacht.com
www.dixiebuilt.com
www.drugfreeliving.org
www.flexmight.com
www.fridakahlopaintings.com
www.graphict.com
www.grow-light.com
www.holographicdatingsites.com
www.homecareprograms.com
www.hotelwk.com
www.ilmercatodegliaffari.com
www.jessicanicole.com
www.joltbros.com
www.kinetictrainer.com
www.lilimac.com
www.louisianasportsdoctors.com
www.malabarista.com
www.mexicansignlanguage.bible
www.militarytotecases.com
www.ministryofoil.com
www.nevadasilver.com
www.newfashionhandbags.com
www.njpoisonivybambooremoval.org
www.oklahomacitysportsdoctors.com
www.picassoprint.com
www.poisonivybambooremovalnj.com
www.primerospasos.com
www.raleighjointpain.com
www.resalerightsproducts.com
www.robertbates.com
www.rotagreca.com
www.selfresolve.com
www.shehorn.com
www.sportsmedicinefortcollins.com
www.stretchbras.com
www.tokyo-tattoo.com
www.vcvestment.com
www.wwwartnet.com
wwwartnet.com

Other certificates including the domain name sportsmedicinefortcollins.com

(limited to 100 certificates)
www.studentbook.co
caratebrianza.org
www.arsutra.com
www.singoli.co
saltlakestemcelltherapy.com
www.nonakedwall.com
www.flexicote.com
www.fauxjackets.com
www.weekdeals.com
www.internationalrighttolife.com
innersight.org
cervaradiroma.com
www.sportsmedicinefortcollins.com
www.pilotlesspods.com
auditsystemstest.com
car-carrier.com
71290.com
tempistiche.com
ecologicaleconomics.com
scioperiamo.com
www.earamplifiers.com
stormshiptroopers.com
www.thanksgivinginvitations.com
vergini.co

Certificate

The complete raw certificate details for www.sportsmedicinefortcollins.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOITCCDQmgAwIBAgISA3ok1/B+me5/UyWkuzFGhlZxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTQwOTA4MjlaFw0x
OTEwMTIwOTA4MjlaMCwxKjAoBgNVBAMTIXd3dy5zcG9ydHNtZWRpY2luZWZvcnRj
b2xsaW5zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKQvFqO1
w0WVUP9/5JpTqAUtxq9MnersRaiMgTqNnvVAU0uIQavNSGHRJexwhKzo6jmttvY2
J6MmEjtcazUMzJEyTJwq0LtPPmya0LnLRKqIUCi8VjK+cdaNSMLuXzlz+hfWwpNy
rI1WBXjryB4bitMdR5YH6yLBSwkDWP5JLuzZJ1wZzewS+sg+V3PbmvvZLf8PIwPy
2EMESLmHZDv2UoITMJAggG0qYxYeHtW4mfBxzfLL65bqSo6pzXaww+Dh40tSELeN
qM38dP1EfXOl4+3NPS08eGMDrW4rzqT4R0eAwi4o6fndlv7Hx8dHJ0+2DQ021Lin
3BgNSEBHqLfipSECAwEAAaOCCx0wggsZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
pJ/UlOjNJZiBfCSvL1ZP1U9TUEIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCCNEGA1UdEQSCCMgwggjEgg1hZ2dldHRp
dm8uY29tgiNhbWVyaWNhc2ZpbmVzdHNlYWZvb2RyZXN0YXVyYW50LmNvbYIcYW5j
aG9yYWdlc3RlbWNlbGxkb2N0b3JzLmNvbYILYXBwbm90ZS5vcmeCCmFyaWVkYS5j
b22CCmF0dHljdC5jb22CGGF1Z3VzdGFzcG9ydHNkb2N0b3JzLmNvbYIcYmFtYm9v
cmVtb3ZhbGNvbnRhaW5tZW50LmNvbYIMY2FubmFqYW0uY29tggtjYXJhbWFuLmNv
bYIRY2VydmFyYWRpcm9tYS5jb22CGWNoYWRpYW5zaWdubGFuZ3VhZ2UuYmlibGWC
FGN1c3RvbWJ1aWx0eWFjaHQuY29tgg5kaXhpZWJ1aWx0LmNvbYISZHJ1Z2ZyZWVs
aXZpbmcub3Jngg1mbGV4bWlnaHQuY29tghdmcmlkYWthaGxvcGFpbnRpbmdzLmNv
bYIMZ3JhcGhpY3QuY29tgg5ncm93LWxpZ2h0LmNvbYIaaG9sb2dyYXBoaWNkYXRp
bmdzaXRlcy5jb22CFGhvbWVjYXJlcHJvZ3JhbXMuY29tggtob3RlbHdrLmNvbYIY
aWxtZXJjYXRvZGVnbGlhZmZhcmkuY29tghFqZXNzaWNhbmljb2xlLmNvbYIMam9s
dGJyb3MuY29tghJraW5ldGljdHJhaW5lci5jb22CC2xpbGltYWMuY29tghpsb3Vp
c2lhbmFzcG9ydHNkb2N0b3JzLmNvbYIPbWFsYWJhcmlzdGEuY29tghltZXhpY2Fu
c2lnbmxhbmd1YWdlLmJpYmxlghVtaWxpdGFyeXRvdGVjYXNlcy5jb22CEW1pbmlz
dHJ5b2ZvaWwuY29tghBuZXZhZGFzaWx2ZXIuY29tghZuZXdmYXNoaW9uaGFuZGJh
Z3MuY29tghxuanBvaXNvbml2eWJhbWJvb3JlbW92YWwub3Jngh1va2xhaG9tYWNp
dHlzcG9ydHNkb2N0b3JzLmNvbYIQcGljYXNzb3ByaW50LmNvbYIccG9pc29uaXZ5
YmFtYm9vcmVtb3ZhbG5qLmNvbYIRcHJpbWVyb3NwYXNvcy5jb22CFHJhbGVpZ2hq
b2ludHBhaW4uY29tghhyZXNhbGVyaWdodHNwcm9kdWN0cy5jb22CD3JvYmVydGJh
dGVzLmNvbYINcm90YWdyZWNhLmNvbYIPc2VsZnJlc29sdmUuY29tggtzaGVob3Ju
LmNvbYIdc3BvcnRzbWVkaWNpbmVmb3J0Y29sbGlucy5jb22CD3N0cmV0Y2hicmFz
LmNvbYIQdG9reW8tdGF0dG9vLmNvbYIOdmN2ZXN0bWVudC5jb22CEXd3dy5hZ2dl
dHRpdm8uY29tgid3d3cuYW1lcmljYXNmaW5lc3RzZWFmb29kcmVzdGF1cmFudC5j
b22CIHd3dy5hbmNob3JhZ2VzdGVtY2VsbGRvY3RvcnMuY29tgg93d3cuYXBwbm90
ZS5vcmeCDnd3dy5hcmllZGEuY29tgg53d3cuYXR0eWN0LmNvbYIcd3d3LmF1Z3Vz
dGFzcG9ydHNkb2N0b3JzLmNvbYIgd3d3LmJhbWJvb3JlbW92YWxjb250YWlubWVu
dC5jb22CEHd3dy5jYW5uYWphbS5jb22CD3d3dy5jYXJhbWFuLmNvbYIVd3d3LmNl
cnZhcmFkaXJvbWEuY29tgh13d3cuY2hhZGlhbnNpZ25sYW5ndWFnZS5iaWJsZYIY
d3d3LmN1c3RvbWJ1aWx0eWFjaHQuY29tghJ3d3cuZGl4aWVidWlsdC5jb22CFnd3
dy5kcnVnZnJlZWxpdmluZy5vcmeCEXd3dy5mbGV4bWlnaHQuY29tght3d3cuZnJp
ZGFrYWhsb3BhaW50aW5ncy5jb22CEHd3dy5ncmFwaGljdC5jb22CEnd3dy5ncm93
LWxpZ2h0LmNvbYIed3d3LmhvbG9ncmFwaGljZGF0aW5nc2l0ZXMuY29tghh3d3cu
aG9tZWNhcmVwcm9ncmFtcy5jb22CD3d3dy5ob3RlbHdrLmNvbYIcd3d3LmlsbWVy
Y2F0b2RlZ2xpYWZmYXJpLmNvbYIVd3d3Lmplc3NpY2FuaWNvbGUuY29tghB3d3cu
am9sdGJyb3MuY29tghZ3d3cua2luZXRpY3RyYWluZXIuY29tgg93d3cubGlsaW1h
Yy5jb22CHnd3dy5sb3Vpc2lhbmFzcG9ydHNkb2N0b3JzLmNvbYITd3d3Lm1hbGFi
YXJpc3RhLmNvbYIdd3d3Lm1leGljYW5zaWdubGFuZ3VhZ2UuYmlibGWCGXd3dy5t
aWxpdGFyeXRvdGVjYXNlcy5jb22CFXd3dy5taW5pc3RyeW9mb2lsLmNvbYIUd3d3
Lm5ldmFkYXNpbHZlci5jb22CGnd3dy5uZXdmYXNoaW9uaGFuZGJhZ3MuY29tgiB3
d3cubmpwb2lzb25pdnliYW1ib29yZW1vdmFsLm9yZ4Ihd3d3Lm9rbGFob21hY2l0
eXNwb3J0c2RvY3RvcnMuY29tghR3d3cucGljYXNzb3ByaW50LmNvbYIgd3d3LnBv
aXNvbml2eWJhbWJvb3JlbW92YWxuai5jb22CFXd3dy5wcmltZXJvc3Bhc29zLmNv
bYIYd3d3LnJhbGVpZ2hqb2ludHBhaW4uY29tghx3d3cucmVzYWxlcmlnaHRzcHJv
ZHVjdHMuY29tghN3d3cucm9iZXJ0YmF0ZXMuY29tghF3d3cucm90YWdyZWNhLmNv
bYITd3d3LnNlbGZyZXNvbHZlLmNvbYIPd3d3LnNoZWhvcm4uY29tgiF3d3cuc3Bv
cnRzbWVkaWNpbmVmb3J0Y29sbGlucy5jb22CE3d3dy5zdHJldGNoYnJhcy5jb22C
FHd3dy50b2t5by10YXR0b28uY29tghJ3d3cudmN2ZXN0bWVudC5jb22CEXd3dy53
d3dhcnRuZXQuY29tgg13d3dhcnRuZXQuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIB
MDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdH7agzGtMxCRIZzO
JU9CcMK//V5CIAjGNzV55hB7zFYAAAFr7/SLDgAABAMARjBEAiAZftCPFSljiY2A
hC2/eT+Li0R5jMEeLrPuZw1Dylq93AIgT+iGwdxNbT3pgThOfzsh253jz099OSqP
gHL9rVX7tGkAdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWvv
9I0fAAAEAwBIMEYCIQC4/2BWIJHerWO+Q2Cj1gfhO5LglosjjNkWbUEo6DFu+AIh
APXgvw9+HRwuvrV9SX7VAv4DewTkzLdRAswQyvyP4p2kMA0GCSqGSIb3DQEBCwUA
A4IBAQAv1Knd4dbW74BfqgDOTCs9HqsBzQcGA8+pmTifAY6CG4pIaqOWqbHpxJ68
SI3lxMKW6eeNnHT5dY/BgptTOnsDaQk6RpUMAjKnlYQrKC4HqP6QPqn7KCp65Lq/
tl899U1t954dWVKkqgZWiPKqFz3JrfH9kImChLrdQ6pu/Kc+LmZ+UUGJvjwx35do
hQfzsKFvp7MIWmqRdIKYUMVApwPzzM6Jr4UZNF+MNVMTpL1ODfp9EYowR5uXolK6
cofD9SYplHT8W06C7Po4R1txMK3/C37voM8HNysVGlySLlvxNiuZpwPPhNR0khBH
UFRkG0kxBidrEtJMKSwTl8HqL2Vh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC8Wo7XDRZVQ/3/kmlOo
BS3Gr0yd6uxFqIyBOo2e9UBTS4hBq81IYdEl7HCErOjqOa229jYnoyYSO1xrNQzM
kTJMnCrQu08+bJrQuctEqohQKLxWMr5x1o1Iwu5fOXP6F9bCk3KsjVYFeOvIHhuK
0x1HlgfrIsFLCQNY/kku7NknXBnN7BL6yD5Xc9ua+9kt/w8jA/LYQwRIuYdkO/ZS
ghMwkCCAbSpjFh4e1biZ8HHN8svrlupKjqnNdrDD4OHjS1IQt42ozfx0/UR9c6Xj
7c09LTx4YwOtbivOpPhHR4DCLijp+d2W/sfHx0cnT7YNDTbUuKfcGA1IQEeot+Kl
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302900279989116767327088349667798630684273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 09:08:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 09:08:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsmedicinefortcollins.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20726302187414510286191032177609732517025023654427634905087202957977824108399078897258132273949087044628357968730579430010490057499188241828667990735738297840375068526340054209353781839680045321261105953938395926568851027164887872099012775914014807011390028908177413996456686031599038769966034326106096857052488273276823953781104181073207753380282117346616932455765582624121205700225356882175609564468203708027545233611075975166235484862561948684897051812879571450782987382851943137478942977639226203790799132429760940983817911068947025415922614166323622164424517183524309791335931848085147970384243000350050068112673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a49fd494e8cd2598817c24af2f564fd54f535042
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggettivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americasfinestseafoodrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchoragestemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appnote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arieda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attyct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augustasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambooremovalcontainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannajam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caraman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cervaradiroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chadiansignlanguage.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custombuiltyacht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixiebuilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfreeliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexmight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridakahlopaintings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grow-light.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holographicdatingsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homecareprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelwk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilmercatodegliaffari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessicanicole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joltbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinetictrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilimac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malabarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexicansignlanguage.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarytotecases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ministryofoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nevadasilver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfashionhandbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njpoisonivybambooremoval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomacitysportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picassoprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivybambooremovalnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primerospasos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raleighjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resalerightsproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertbates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotagreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfresolve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shehorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinefortcollins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretchbras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo-tattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aggettivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americasfinestseafoodrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anchoragestemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appnote.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arieda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attyct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augustasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bambooremovalcontainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannajam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caraman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cervaradiroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chadiansignlanguage.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custombuiltyacht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dixiebuilt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drugfreeliving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexmight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridakahlopaintings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grow-light.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holographicdatingsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homecareprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelwk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilmercatodegliaffari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jessicanicole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joltbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinetictrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lilimac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisianasportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malabarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mexicansignlanguage.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.militarytotecases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ministryofoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nevadasilver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfashionhandbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.njpoisonivybambooremoval.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomacitysportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picassoprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivybambooremovalnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primerospasos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighjointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resalerightsproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertbates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotagreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfresolve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shehorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinefortcollins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stretchbras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyo-tattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vcvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wwwartnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwartnet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016beff48b0e00000403004630440220197ed08f152963898d80842dbf793f8b8b44798cc11e2eb3ee670d43ca5abddc02204fe886c1dc4d6d3de981384e7f3b21db9de3cf4f7d392a8f8072fdad55fbb46900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016beff48d1f0000040300483046022100b8ff60562091dead63be4360a3d607e13b92e0968b238cd9166d4128e8316ef8022100f5e0bf0f7e1d1c2ebeb57d497ed502fe037b04e4ccb75102cc10cafc8fe29da4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002fd4a9dde1d6d6ef805faa00ce4c2b3d1eab01cd070603cfa999389f018e821b8a486aa396a9b1e9c49ebc488de5c4c296e9e78d9c74f9758fc1829b533a7b0369093a46950c0232a795842b282e07a8fe903ea9fb282a7ae4babfb65f3df54d6df79e1d5952a4aa065688f2aa173dc9adf1fd90898284badd43aa6efca73e2e667e514189be3c31df97688507f3b0a16fa7b3085a6a9174829850c540a703f3ccce89af8519345f8c355313a4bd4e0dfa7d118a30479b97a252ba7287c3f526299474fc5b4e82ecfa38475b7130adff0b7eefa0cf07372b151a5c922e5bf1362b99a703cf84d4749210475054641b493106276b12d24c292c1397c1ea2f6561