mersonoffice.okdata.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:f2:9f:98:7c:a5:2a:b6:15:5e:cd:ac:69:b9:d5:3f:bb was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mersonoffice.okdata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:f2:9f:98:7c:a5:2a:b6:15:5e:cd:ac:69:b9:d5:3f:bb
Serial Number (int): 299090419999566096167871103848546460581819
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e0:1f:16:0d:e1:eb:da:2b:c1:17:7c:d0:42:e6:09:8a:5f:b6:34:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:7d:6c:03:3b:30:19:94:fd:b0:1a:d8:6c:f1:86:d3:29:cd:d0:b6
Fingerprint (sha256): 80:42:6d:aa:fd:b9:1c:8c:18:c3:0e:d7:0b:81:d9:87:4f:5c:4c:92:7f:3e:37:82:5e:c4:14:3c:6c:88:8a:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mersonoffice.okdata.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mersonoffice.okdata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chrisingram-guru.okdata.com
chrisingram.guru
mail.chrisingram.guru
mail.orthodontic.associates
mail.straightbytes.com
mersoninvestments.okdata.com
mersonoffice.okdata.com
mhprice.com
mhprice.okdata.com
orthodontic-associates.okdata.com
orthodontic.associates
straightbytes.com
straightbytes.okdata.com
www.chrisingram-guru.okdata.com
www.chrisingram.guru
www.mersoninvestments.okdata.com
www.mersonoffice.okdata.com
www.mhprice.com
www.mhprice.okdata.com
www.orthodontic-associates.okdata.com
www.orthodontic.associates
www.straightbytes.com
www.straightbytes.okdata.com

Other certificates including the domain name okdata.com

(limited to 100 certificates)
quantum.church
quantum.church
chrisingram.guru
okdata.com
d2squared.net
rwd20.com
mhprice.com
terranco.com
orthodontic.associates
okdata.com
mhprice.com
fmfic.com
mccysorg.okdata.com
fmfic.com
www.forgedinfactcom.okdata.com
straightbytes.okdata.com
webdisk.terrasoba.com
okdata.com
terranco.com
humphryesco.com
rwd20.com
genosfurs.okdata.com
mersonoffice.okdata.com
terranco.com
quantum.church
terranco.com
webdisk.fmfic.com
cpanel.fmfic.com
straightbytes.com
terranco-net.okdata.com
fmfic.com
chrisingram.guru
okdata.com
okdata.com
chrisingram.guru
terrawall.net
quantum.church
sruinc.org
sruinc.org
cpcontacts.terrasoba.com
mhprice.com
quantum.church
mhprice.com
rwd20.com
mersonoffice.okdata.com
rwd20.com
rwd20.com
sruinc.org
terranco.com
terran.company
terran.company
rwd20.com
terran.company
okdata.com
d2squared.net
www.terranco.com
okdata.com
terran.company
oasmiles.okdata.com
quantum.church
straightbytes.com

Certificate

The complete raw certificate details for mersonoffice.okdata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpTCCBo2gAwIBAgISA27yn5h8pSq2FV7NrGm51T+7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMTAwOTU4NTVaFw0x
OTA0MTAwOTU4NTVaMCIxIDAeBgNVBAMTF21lcnNvbm9mZmljZS5va2RhdGEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt97vmQ8oA1uwuifWu0jA
MzayVjYf0I5ae4hcwxDZ4avkWEhNkaMar9G0CDMBKb5lUnsAHnErWMhF680qTpxO
GOmeMDc6bYqzAYXXZ61JhTtUey75B+Fwtav1fr/DJLVb9LhE1S0md0BR0LAIOV+N
sEMuXYx53X6tlINp4jCOFQw/u//BvBFA9XNzrHoDW+DPDEEB79s9Bu8976mr6Y4F
SJXCnNwKN8hbnQx5F/r5rw3e8FF1JcSi++aotSybganrnx2FePXQNjNkEsEu1Sb+
iUi3kHgdbPanW+57LpNPQfxMz9qvYzjS1Of/1K3xZlzuNR/VkEmZZmhXYFVv2FYi
CQIDAQABo4IEqzCCBKcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTgHxYN4evaK8EX
fNBC5gmKX7Y06DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMIICXwYDVR0RBIICVjCCAlKCG2NocmlzaW5ncmFtLWd1cnUu
b2tkYXRhLmNvbYIQY2hyaXNpbmdyYW0uZ3VydYIVbWFpbC5jaHJpc2luZ3JhbS5n
dXJ1ghttYWlsLm9ydGhvZG9udGljLmFzc29jaWF0ZXOCFm1haWwuc3RyYWlnaHRi
eXRlcy5jb22CHG1lcnNvbmludmVzdG1lbnRzLm9rZGF0YS5jb22CF21lcnNvbm9m
ZmljZS5va2RhdGEuY29tggttaHByaWNlLmNvbYISbWhwcmljZS5va2RhdGEuY29t
giFvcnRob2RvbnRpYy1hc3NvY2lhdGVzLm9rZGF0YS5jb22CFm9ydGhvZG9udGlj
LmFzc29jaWF0ZXOCEXN0cmFpZ2h0Ynl0ZXMuY29tghhzdHJhaWdodGJ5dGVzLm9r
ZGF0YS5jb22CH3d3dy5jaHJpc2luZ3JhbS1ndXJ1Lm9rZGF0YS5jb22CFHd3dy5j
aHJpc2luZ3JhbS5ndXJ1giB3d3cubWVyc29uaW52ZXN0bWVudHMub2tkYXRhLmNv
bYIbd3d3Lm1lcnNvbm9mZmljZS5va2RhdGEuY29tgg93d3cubWhwcmljZS5jb22C
Fnd3dy5taHByaWNlLm9rZGF0YS5jb22CJXd3dy5vcnRob2RvbnRpYy1hc3NvY2lh
dGVzLm9rZGF0YS5jb22CGnd3dy5vcnRob2RvbnRpYy5hc3NvY2lhdGVzghV3d3cu
c3RyYWlnaHRieXRlcy5jb22CHHd3dy5zdHJhaWdodGJ5dGVzLm9rZGF0YS5jb20w
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWg3ajtl
AAAEAwBHMEUCIQDbBdJlStU4IQcnmiQV3RLo2sa387ppT1+PVlTFnxBPRgIgYy8H
dOY2GoUcjg8GaxV20JX/+asYsmLBnhr5S607FNUAdgBj8tvN6DvMLM8LcoQnV2sz
pI1hd4+9daY4scdoVEvYjQAAAWg3ajtkAAAEAwBHMEUCIQDFzs+Fiy2RFWbWhyPO
afjWURrQKyW5ialU0z2P6whpBQIgDGGmRtZ/zgXZOXPj0IG2Zy6uZlABJdLWx1nB
hR4SSHIwDQYJKoZIhvcNAQELBQADggEBAFJNkmAi2tcJyykET4tgp1Wjfa/DDfe+
JT+MaEOP7TBOeTW5+A6vY8zx5D3fFPUTYX20pi/UnxFoPpxzByjSvbiZIEnjSHpd
awa4aCiKIPe2ZHSCpgS0md3G/uhjTT1aRYAFTY1K7QAxIN0568xyHfSklw+AYwMe
P2tH0qbFoWy/q8SoixHN/+Wx11v/5S9fXuJGMvpef0IuydEavDkS/W7QXswrxGXK
oCikffy0vrncqCBFnpEiqiykeHUWDz3m31w0cenJfC1sp1fPfP7lz+Nsji1Rhmx+
mL82CysA3o85ajvA0AUmscGwAoQ+VRAOA0dynj139MN/5hc3ZYb0xV4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt97vmQ8oA1uwuifWu0jA
MzayVjYf0I5ae4hcwxDZ4avkWEhNkaMar9G0CDMBKb5lUnsAHnErWMhF680qTpxO
GOmeMDc6bYqzAYXXZ61JhTtUey75B+Fwtav1fr/DJLVb9LhE1S0md0BR0LAIOV+N
sEMuXYx53X6tlINp4jCOFQw/u//BvBFA9XNzrHoDW+DPDEEB79s9Bu8976mr6Y4F
SJXCnNwKN8hbnQx5F/r5rw3e8FF1JcSi++aotSybganrnx2FePXQNjNkEsEu1Sb+
iUi3kHgdbPanW+57LpNPQfxMz9qvYzjS1Of/1K3xZlzuNR/VkEmZZmhXYFVv2FYi
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299090419999566096167871103848546460581819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 09:58:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 09:58:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mersonoffice.okdata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23211543612789957936237841718220271587577268538681610435106711279645381343199764014543566968638238988849459097594124453181138119338361662708321687606414659559281045124745526305201430575660230642401419096321026737292436611692280737529299607088013790507852659720761596018829696966902083215830625123113901171977961976586814261164554083774080048048080905869352280042398432786704075121011252815143897356040874488861328521180663543580633330083539338677073706100079415427824155914213744476499254842590485684835528907610713207138982013598880701425323873998838480058759576005096238247365683795387234846900949255262064549962249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e01f160de1ebda2bc1177cd042e6098a5fb634e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisingram-guru.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.orthodontic.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.straightbytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersoninvestments.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mersonoffice.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhprice.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthodontic-associates.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthodontic.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straightbytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straightbytes.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisingram-guru.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mersoninvestments.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mersonoffice.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhprice.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthodontic-associates.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthodontic.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.straightbytes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.straightbytes.okdata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168376a3b650000040300473045022100db05d2654ad5382107279a2415dd12e8dac6b7f3ba694f5f8f5654c59f104f460220632f0774e6361a851c8e0f066b1576d095fff9ab18b262c19e1af94bad3b14d500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168376a3b640000040300473045022100c5cecf858b2d911566d68723ce69f8d6511ad02b25b989a954d33d8feb08690502200c61a646d67fce05d93973e3d081b6672eae66500125d2d6c759c1851e124872
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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