www.newmexicosportsphysicians.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:92:d4:19:2e:1f:0a:da:5f:7d:10:52:04:41:70:d3:02:16 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.newmexicosportsphysicians.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:d4:19:2e:1f:0a:da:5f:7d:10:52:04:41:70:d3:02:16
Serial Number (int): 311300010443715894794048469847606362833430
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e9:07:cc:59:3d:e1:d2:6e:37:3a:29:98:bd:54:4a:f8:6f:f1:ea:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5e:e6:fc:78:f7:5d:08:a3:3e:f0:b9:71:01:f6:31:8b:96:ac:1d:b1
Fingerprint (sha256): 65:bd:2b:6f:5e:00:90:03:bd:22:96:58:c2:eb:98:da:9b:84:ae:53:d7:dd:8f:3e:78:a6:21:2f:de:fe:f1:ad

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.newmexicosportsphysicians.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.newmexicosportsphysicians.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a1autotrader.com
airforcecases.com
allocoin.com
arizonaranches.com
baltimorestemcellcenters.com
batchanalytics.com
bestestclasses.com
buoyantbitcoins.com
cbcandies.com
cbdoilkingdom.com
co2gunbroker.com
cookmean.com
cottonkeeper.com
dappspoker.com
do-not-waste-my-seconds.com
donorbucks.com
donotwastemyseconds.com
doveapartments.com
ebrandcenter.com
elevatorandescalator.com
eyaculadorvirtual.com
fitmean.com
grilledonions.com
hostingresellerbusiness.com
houstonluxurytours.com
jrmoehringer.com
kingrooter.com
leifbaker.com
magnusprofits.com
mobilesimulators.com
mreffectiveness.com
newmexicosportsphysicians.com
permanentresidents.com
prolominerals.com
quincylocksmiths.com
serenitylegalcenterpl.com
standbyloan.com
steelpipemanufacturer.com
steelpipemanufacturers.com
thehomesecuritysystems.com
truewealthgives.com
usedhorizontalgrinders.com
valleygames.com
vegaslemonlawlawyer.com
vegasvacationers.com
vital-entities.com
vitalentitites.com
voltpass.com
whywallets.com
wingrao.com
www.a1autotrader.com
www.airforcecases.com
www.allocoin.com
www.arizonaranches.com
www.baltimorestemcellcenters.com
www.batchanalytics.com
www.bestestclasses.com
www.buoyantbitcoins.com
www.cbcandies.com
www.cbdoilkingdom.com
www.co2gunbroker.com
www.cookmean.com
www.cottonkeeper.com
www.dappspoker.com
www.do-not-waste-my-seconds.com
www.donorbucks.com
www.donotwastemyseconds.com
www.doveapartments.com
www.ebrandcenter.com
www.elevatorandescalator.com
www.eyaculadorvirtual.com
www.fitmean.com
www.grilledonions.com
www.hostingresellerbusiness.com
www.houstonluxurytours.com
www.jrmoehringer.com
www.kingrooter.com
www.leifbaker.com
www.magnusprofits.com
www.mobilesimulators.com
www.mreffectiveness.com
www.newmexicosportsphysicians.com
www.permanentresidents.com
www.prolominerals.com
www.quincylocksmiths.com
www.serenitylegalcenterpl.com
www.standbyloan.com
www.steelpipemanufacturer.com
www.steelpipemanufacturers.com
www.thehomesecuritysystems.com
www.truewealthgives.com
www.usedhorizontalgrinders.com
www.valleygames.com
www.vegaslemonlawlawyer.com
www.vegasvacationers.com
www.vital-entities.com
www.vitalentitites.com
www.voltpass.com
www.whywallets.com
www.wingrao.com

Other certificates including the domain name newmexicosportsphysicians.com

(limited to 100 certificates)
terralogics.com
travelreport.co
www.tchemicals.com
www.osanna.co
www.newmexicosportsphysicians.com
qualitynetworkers.com
honolulusportsdoctor.com
www.doveapartments.com
www.wintercamouflage.com
southafricacallertune.com
milpitaslocksmiths.com
canarie.com
www.basicmemes.com
www.itm1.com
cbcandies.com
vallejomovers.com
www.firu.info
upperdarbydentistry.com
carchamois.com
flightcheapdeals.com
www.lasvegascarauctions.com
personalidade.mobi
valleygames.com

Certificate

The complete raw certificate details for www.newmexicosportsphysicians.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbc7hcAhVAStv6QnQ64S
9QB4FN4Oj6MfktbOf2ya3xj6BD9LFFBS4cYhazX1GTks7SnqBQKuIghSGnfD6Lzn
7VLuyfzjBW8J0LihK1PGQ0fAIkl7M1qfVV1qHOmQMl49O+OQtTv6od932rSxJnSJ
enj5wDkjy8Fq/HPZerhytmPaVpHGos3TlFatrGSCMoNii5LLs5Eh/1FrNV2IsdaG
ZUuC8POPW20EOxVo2R4zBrvKeraDR4ICNtJku9Mz7C7WdEJQ82aw81jyqckVpre7
2ABJXq2zWvfNzkWuzvUVJu9eOAxJ8trkQjAuIRTLty0dLcmVXWkp53JTkP4sN7Pv
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311300010443715894794048469847606362833430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 03:56:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 03:56:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.newmexicosportsphysicians.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22939488516939448263301032069472879550705822884284619995827228269954138310646982066882478804367449001474080445226258532580013079099361299420108683984595175196175762995760725963661848269996949497435299745566955635783529265860351668303811457468922725198964191131781095166278396854559089078335422627021247250880873894358627016653957054813606273380890879844252844060584373043967099938556979193093060991828566781228797425042266683734843489683246453023256617982414662015018543392123951404659945339774034394704802001551101330911061985782562863807339086774277974380349004184985772288967100184284579252539843173804742525841311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e907cc593de1d26e373a2998bd544af86ff1ea7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2272 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1autotrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airforcecases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arizonaranches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimorestemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batchanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestestclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buoyantbitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbcandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbdoilkingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co2gunbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookmean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottonkeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dappspoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'do-not-waste-my-seconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donotwastemyseconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doveapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebrandcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevatorandescalator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyaculadorvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitmean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grilledonions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostingresellerbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonluxurytours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrmoehringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingrooter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leifbaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnusprofits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilesimulators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mreffectiveness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmexicosportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permanentresidents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prolominerals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quincylocksmiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serenitylegalcenterpl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standbyloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelpipemanufacturer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelpipemanufacturers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehomesecuritysystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truewealthgives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedhorizontalgrinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegaslemonlawlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegasvacationers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vital-entities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalentitites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voltpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whywallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wingrao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a1autotrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airforcecases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allocoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arizonaranches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baltimorestemcellcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.batchanalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestestclasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buoyantbitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbcandies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbdoilkingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.co2gunbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cookmean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottonkeeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dappspoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.do-not-waste-my-seconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donorbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donotwastemyseconds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doveapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebrandcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevatorandescalator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eyaculadorvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fitmean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grilledonions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hostingresellerbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houstonluxurytours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrmoehringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingrooter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leifbaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnusprofits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobilesimulators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mreffectiveness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmexicosportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.permanentresidents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prolominerals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quincylocksmiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serenitylegalcenterpl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.standbyloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steelpipemanufacturer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steelpipemanufacturers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehomesecuritysystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truewealthgives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usedhorizontalgrinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegaslemonlawlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegasvacationers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vital-entities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalentitites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voltpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whywallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wingrao.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017115330072000004030046304402206b6aa6fc9a82f6cea4957ddef5fae597c9d0a0eeb1e05e81c4cd82c88567489e022071ab19ce1515dda8125ae3966520ab6d6f8331ea85e75d1b70bb87b52715d73f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000171153300980000040300473045022100dd8ca269af91dff1c73075d0e720cc55ef7b42958b752b0f1a26cc10989a9d4002201554c35312f827fb50c5ae9ba03b897787cb7291432d3061307ed0806db712ac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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