www.minnesotasportsmed.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:85:58:ba:f8:6e:f7:a9:75:dc:1f:59:ef:a6:03:f2:1f:b9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.minnesotasportsmed.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:85:58:ba:f8:6e:f7:a9:75:dc:1f:59:ef:a6:03:f2:1f:b9
Serial Number (int): 393824641397199889546529013162840429830073
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6f:73:bd:a7:3d:53:84:3b:94:d1:14:51:0a:aa:26:6f:63:d2:5f:5b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:d3:41:b1:14:4c:13:5e:3c:dc:db:5f:2e:b8:34:f4:5c:82:3d:d2
Fingerprint (sha256): 62:06:6b:c9:ab:63:eb:56:4c:ad:f9:b2:86:8c:ed:ad:e9:01:d5:b2:b6:e5:1d:ac:9d:17:13:7f:30:c5:94:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.minnesotasportsmed.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.minnesotasportsmed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0mph.com
4dpaving.com
attenti.com
bitcoinpung.com
bush-hog.com
caligambling.com
card-mate.com
casinocarbonara.com
celebrityghosthunting.com
chemgel.com
cherryhilltowing.com
chinahousesitting.com
corned-beef.com
coveragecoach.com
customsportsnetting.com
dallasstemcellmedicine.com
domainemailsearch.com
durapack.com
durawash.com
edmondsdental.com
fanboyaf.com
helpingpeopletravel.com
icerepublick.com
ieohodl.com
ilmantilia.com
joltmerch.com
kimhyunjoong.com
lifematched.com
logicreative.com
minnesotasportsmed.com
nanshacapital.com
neopunch.com
neverwash.com
omniink.com
organicdrycleaning.com
pfhotel.com
pipelite.com
qualbook.com
redheadsmovie.com
rubber-roofing.com
sainttropezrealestate.com
science3d.com
silk-printing.com
sportsdoctorsnewyork.com
supraforce.com
swissfresh.com
teletrue.com
thelostsock.com
www.0mph.com
www.4dpaving.com
www.attenti.com
www.bitcoinpung.com
www.bush-hog.com
www.caligambling.com
www.card-mate.com
www.casinocarbonara.com
www.celebrityghosthunting.com
www.chemgel.com
www.cherryhilltowing.com
www.chinahousesitting.com
www.corned-beef.com
www.coveragecoach.com
www.customsportsnetting.com
www.dallasstemcellmedicine.com
www.domainemailsearch.com
www.durapack.com
www.durawash.com
www.edmondsdental.com
www.fanboyaf.com
www.helpingpeopletravel.com
www.icerepublick.com
www.ieohodl.com
www.ilmantilia.com
www.joltmerch.com
www.kimhyunjoong.com
www.lifematched.com
www.logicreative.com
www.minnesotasportsmed.com
www.nanshacapital.com
www.neopunch.com
www.neverwash.com
www.omniink.com
www.organicdrycleaning.com
www.pfhotel.com
www.pipelite.com
www.qualbook.com
www.redheadsmovie.com
www.rubber-roofing.com
www.sainttropezrealestate.com
www.science3d.com
www.silk-printing.com
www.sportsdoctorsnewyork.com
www.supraforce.com
www.swissfresh.com
www.teletrue.com
www.thelostsock.com
www.xn--zpknc-n4acc.com
www.yanktondental.com
xn--zpknc-n4acc.com
yanktondental.com

Other certificates including the domain name minnesotasportsmed.com

(limited to 100 certificates)
www.exploredrivegrowth.co
778237.com
www.vianapolipizza.com
www.faircanna.com
dianaherrera.com
www.campotosto.net
www.minnesotasportsmed.com
ketobar.org
www.arch-enemy.com
alliantsoftware.com
draw21.com
papromocode.com
minnesotasportsmed.com
www.onomealand.com
www.convertpsdtojoomla.com
danburylimoservice.com
alliantsoftware.com
polywipe.com
minnesotasportsmed.com
www.xn--ceb4ag.com
428.me
www.123divorce.fr
rundi.bible
morphology.org
freespinza.com
dietid.world
nvlc.com

Certificate

The complete raw certificate details for www.minnesotasportsmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINIzCCDAugAwIBAgISBIVYuvhu96l13B9Z76YD8h+5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTUyMDMwMTNaFw0x
OTExMTMyMDMwMTNaMCUxIzAhBgNVBAMTGnd3dy5taW5uZXNvdGFzcG9ydHNtZWQu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIDxobjiFpPr8I8X
E8lJUyAzHGc+bSt9D+k1gU94oDGTmncpUyMJmM/Xce0kfSCVrp+qizSakfn5oYAq
4F8gt750Su+phU1UpxmAecRPxkk6MD9ahgSmDjywDlyma+plzO+s1PkJYqkHcUZD
LHIUVMMjvO8IOIU+pnTuwST6yA5xShcoISWYr2ImLPy0F4f5CcfwrcKLLKFvD9TE
zHvKmO5HXslMPFi47cXE9ZublXVIoyai5QuB9r56JvQLsQMBSgcoMrPGxEiGs74x
DVYDpdfi+/IEoDvTEKxT8QeYNjTPECF3/mNIywPAJ7cRF+grPJrc8sI+gG+3kLe2
FBUr+wIDAQABo4IKJjCCCiIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRvc72nPVOE
O5TRFFEKqiZvY9JfWzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIIH2wYDVR0RBIIH0jCCB86CCDBtcGguY29tggw0ZHBh
dmluZy5jb22CC2F0dGVudGkuY29tgg9iaXRjb2lucHVuZy5jb22CDGJ1c2gtaG9n
LmNvbYIQY2FsaWdhbWJsaW5nLmNvbYINY2FyZC1tYXRlLmNvbYITY2FzaW5vY2Fy
Ym9uYXJhLmNvbYIZY2VsZWJyaXR5Z2hvc3RodW50aW5nLmNvbYILY2hlbWdlbC5j
b22CFGNoZXJyeWhpbGx0b3dpbmcuY29tghVjaGluYWhvdXNlc2l0dGluZy5jb22C
D2Nvcm5lZC1iZWVmLmNvbYIRY292ZXJhZ2Vjb2FjaC5jb22CF2N1c3RvbXNwb3J0
c25ldHRpbmcuY29tghpkYWxsYXNzdGVtY2VsbG1lZGljaW5lLmNvbYIVZG9tYWlu
ZW1haWxzZWFyY2guY29tggxkdXJhcGFjay5jb22CDGR1cmF3YXNoLmNvbYIRZWRt
b25kc2RlbnRhbC5jb22CDGZhbmJveWFmLmNvbYIXaGVscGluZ3Blb3BsZXRyYXZl
bC5jb22CEGljZXJlcHVibGljay5jb22CC2llb2hvZGwuY29tgg5pbG1hbnRpbGlh
LmNvbYINam9sdG1lcmNoLmNvbYIQa2ltaHl1bmpvb25nLmNvbYIPbGlmZW1hdGNo
ZWQuY29tghBsb2dpY3JlYXRpdmUuY29tghZtaW5uZXNvdGFzcG9ydHNtZWQuY29t
ghFuYW5zaGFjYXBpdGFsLmNvbYIMbmVvcHVuY2guY29tgg1uZXZlcndhc2guY29t
ggtvbW5paW5rLmNvbYIWb3JnYW5pY2RyeWNsZWFuaW5nLmNvbYILcGZob3RlbC5j
b22CDHBpcGVsaXRlLmNvbYIMcXVhbGJvb2suY29tghFyZWRoZWFkc21vdmllLmNv
bYIScnViYmVyLXJvb2ZpbmcuY29tghlzYWludHRyb3BlenJlYWxlc3RhdGUuY29t
gg1zY2llbmNlM2QuY29tghFzaWxrLXByaW50aW5nLmNvbYIYc3BvcnRzZG9jdG9y
c25ld3lvcmsuY29tgg5zdXByYWZvcmNlLmNvbYIOc3dpc3NmcmVzaC5jb22CDHRl
bGV0cnVlLmNvbYIPdGhlbG9zdHNvY2suY29tggx3d3cuMG1waC5jb22CEHd3dy40
ZHBhdmluZy5jb22CD3d3dy5hdHRlbnRpLmNvbYITd3d3LmJpdGNvaW5wdW5nLmNv
bYIQd3d3LmJ1c2gtaG9nLmNvbYIUd3d3LmNhbGlnYW1ibGluZy5jb22CEXd3dy5j
YXJkLW1hdGUuY29tghd3d3cuY2FzaW5vY2FyYm9uYXJhLmNvbYIdd3d3LmNlbGVi
cml0eWdob3N0aHVudGluZy5jb22CD3d3dy5jaGVtZ2VsLmNvbYIYd3d3LmNoZXJy
eWhpbGx0b3dpbmcuY29tghl3d3cuY2hpbmFob3VzZXNpdHRpbmcuY29tghN3d3cu
Y29ybmVkLWJlZWYuY29tghV3d3cuY292ZXJhZ2Vjb2FjaC5jb22CG3d3dy5jdXN0
b21zcG9ydHNuZXR0aW5nLmNvbYIed3d3LmRhbGxhc3N0ZW1jZWxsbWVkaWNpbmUu
Y29tghl3d3cuZG9tYWluZW1haWxzZWFyY2guY29tghB3d3cuZHVyYXBhY2suY29t
ghB3d3cuZHVyYXdhc2guY29tghV3d3cuZWRtb25kc2RlbnRhbC5jb22CEHd3dy5m
YW5ib3lhZi5jb22CG3d3dy5oZWxwaW5ncGVvcGxldHJhdmVsLmNvbYIUd3d3Lmlj
ZXJlcHVibGljay5jb22CD3d3dy5pZW9ob2RsLmNvbYISd3d3LmlsbWFudGlsaWEu
Y29tghF3d3cuam9sdG1lcmNoLmNvbYIUd3d3LmtpbWh5dW5qb29uZy5jb22CE3d3
dy5saWZlbWF0Y2hlZC5jb22CFHd3dy5sb2dpY3JlYXRpdmUuY29tghp3d3cubWlu
bmVzb3Rhc3BvcnRzbWVkLmNvbYIVd3d3Lm5hbnNoYWNhcGl0YWwuY29tghB3d3cu
bmVvcHVuY2guY29tghF3d3cubmV2ZXJ3YXNoLmNvbYIPd3d3Lm9tbmlpbmsuY29t
ghp3d3cub3JnYW5pY2RyeWNsZWFuaW5nLmNvbYIPd3d3LnBmaG90ZWwuY29tghB3
d3cucGlwZWxpdGUuY29tghB3d3cucXVhbGJvb2suY29tghV3d3cucmVkaGVhZHNt
b3ZpZS5jb22CFnd3dy5ydWJiZXItcm9vZmluZy5jb22CHXd3dy5zYWludHRyb3Bl
enJlYWxlc3RhdGUuY29tghF3d3cuc2NpZW5jZTNkLmNvbYIVd3d3LnNpbGstcHJp
bnRpbmcuY29tghx3d3cuc3BvcnRzZG9jdG9yc25ld3lvcmsuY29tghJ3d3cuc3Vw
cmFmb3JjZS5jb22CEnd3dy5zd2lzc2ZyZXNoLmNvbYIQd3d3LnRlbGV0cnVlLmNv
bYITd3d3LnRoZWxvc3Rzb2NrLmNvbYIXd3d3LnhuLS16cGtuYy1uNGFjYy5jb22C
FXd3dy55YW5rdG9uZGVudGFsLmNvbYITeG4tLXpwa25jLW40YWNjLmNvbYIReWFu
a3RvbmRlbnRhbC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3
NXnmEHvMVgAAAWyXMDHkAAAEAwBGMEQCIAmzAO7OEoTuK6I5oASpFrQpZzBV5K7H
iM0HNusMlN1SAiBKYTMrVaB/5Cticj0P0Rw6ucaRB2pdG9pWB8Zww05UYQB2ACk8
UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbJcwMdQAAAQDAEcwRQIh
AJIffyv7UXKjyC5zDgp1C/QPhOmutsa0NlOM731bcY7IAiAcbtXfBxt1KsCCL1TW
GXGfXhVsMJ29wJqD6MSvYr+N/TANBgkqhkiG9w0BAQsFAAOCAQEAB9U1f1VsQlc1
R+5CZDCQ+AoD65Z1IpU5/d/U+ixUQUNLesNmjeXerFZvx95rzM3/0GvUPZbKZR1k
YKV7wRqxAVd9H3/2UIfhgfBibnyD8HDW/OhVDBvUU0LHZk/64fApOSqOKC/Z1s18
sJ7B51VDIXuAMxiE7gR4HxheAxRaPmdEHRhG9I4s9+RV8JPp1XLWUBeheXWqFqMA
UcVFQ2eEHTY8qbVGH+UiSfnlMdSAcnm1QjHaI3Q+YE+JJz4uJBJAQ4Nr4XC6ECqD
5mNnBx8SF+W9Xd2y/NtMXedJYEuAPvCx9eJ4Fl00EvwUcLftgwolPAwrzZa4ryIA
b+uIbpYPFA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIDxobjiFpPr8I8XE8lJ
UyAzHGc+bSt9D+k1gU94oDGTmncpUyMJmM/Xce0kfSCVrp+qizSakfn5oYAq4F8g
t750Su+phU1UpxmAecRPxkk6MD9ahgSmDjywDlyma+plzO+s1PkJYqkHcUZDLHIU
VMMjvO8IOIU+pnTuwST6yA5xShcoISWYr2ImLPy0F4f5CcfwrcKLLKFvD9TEzHvK
mO5HXslMPFi47cXE9ZublXVIoyai5QuB9r56JvQLsQMBSgcoMrPGxEiGs74xDVYD
pdfi+/IEoDvTEKxT8QeYNjTPECF3/mNIywPAJ7cRF+grPJrc8sI+gG+3kLe2FBUr
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393824641397199889546529013162840429830073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 20:30:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 20:30:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.minnesotasportsmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21271619828365439208272934154092246986835429482783929608293427017037769931044906744337768980353975570464810961652794882534687199563240551857273005247016539136835951512763088922701908365744942586735065634278091944588897495713120864809151226724027749302128400661522441246380931028884018640830478524366617503094833507084796463357607920742074301706055679766047368507789189219380091316465555827924620936939274559747015738437645643036897465053937669582439843680518467355453326088028710515336434366785998320638052420719410787071828460873714522339313128542947921548290707663797849902101681614945959010169774852699538461109243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f73bda73d53843b94d114510aaa266f63d25f5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2002 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0mph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dpaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinpung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bush-hog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caligambling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card-mate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinocarbonara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrityghosthunting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemgel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherryhilltowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinahousesitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corned-beef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coveragecoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customsportsnetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasstemcellmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainemailsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durawash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmondsdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanboyaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpingpeopletravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icerepublick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ieohodl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilmantilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joltmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimhyunjoong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifematched.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanshacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neopunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neverwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicdrycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipelite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redheadsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubber-roofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainttropezrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'science3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silk-printing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsdoctorsnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supraforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teletrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelostsock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.0mph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dpaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinpung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bush-hog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caligambling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.card-mate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinocarbonara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebrityghosthunting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemgel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cherryhilltowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinahousesitting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corned-beef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coveragecoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customsportsnetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallasstemcellmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainemailsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durapack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durawash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmondsdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fanboyaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpingpeopletravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icerepublick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ieohodl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilmantilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joltmerch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimhyunjoong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifematched.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logicreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nanshacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neopunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neverwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omniink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicdrycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pfhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipelite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redheadsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rubber-roofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sainttropezrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.science3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silk-printing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsdoctorsnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supraforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teletrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thelostsock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--zpknc-n4acc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yanktondental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zpknc-n4acc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yanktondental.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c973031e40000040300463044022009b300eece1284ee2ba239a004a916b429673055e4aec788cd0736eb0c94dd5202204a61332b55a07fe42b62723d0fd11c3ab9c691076a5d1bda5607c670c34e5461007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c973031d40000040300473045022100921f7f2bfb5172a3c82e730e0a750bf40f84e9aeb6c6b436538cef7d5b718ec802201c6ed5df071b752ac0822f54d619719f5e156c309dbdc09a83e8c4af62bf8dfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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