massheathchoices.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bf:a0:80:e5:15:13:64:91:54:d7:3e:97:f5:6c:e1:ac:16 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=massheathchoices.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:a0:80:e5:15:13:64:91:54:d7:3e:97:f5:6c:e1:ac:16
Serial Number (int): 326544135616845057902086131272386137402390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:a5:e5:d2:88:47:4c:20:86:73:98:e4:a4:08:1b:95:6b:0c:5a:3a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:9d:80:cf:c4:dd:99:43:bd:c5:0c:22:7a:65:56:de:a3:59:17:0c
Fingerprint (sha256): 91:1e:1f:d8:13:95:bc:f0:26:6f:62:2f:63:fb:f7:11:78:33:f2:b6:57:17:db:da:e7:03:b6:fa:c1:03:5a:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate massheathchoices.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for massheathchoices.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anesthesiologistphysician.com
*.arrowhwadadvance.com
*.aveenowassettlement.com
*.bmymadrerisasettlement.com
*.bnmadrerisasettlement.com
*.bnymadreisasettlement.com
*.bnymadrerisasettlemeny.com
*.bnymadrerisasettlrment.com
*.bnymadrerisasetttlement.com
*.bnymadrerosasettlement.com
*.bnymadrersasettlement.com
*.bnymadrfxerisasettlement.com
*.bnymadrrisasettlement.com
*.bnymadrsettlement.com
*.bnymarderisasettlement.com
*.bnymarerisasettlement.com
*.bnymdrerisasettlement.com
*.brinkmoneyallaccess.com
*.chrysleremissionssettelment.com
*.coatingservicessurvey.com
*.copervisionpromotions.com
*.dcunivetse.com
*.dgcustomerfrst.com
*.familyfuzz.com
*.fedexemployeesuserrsettlement.com
*.frotrowed.com
*.gamestopcodssweeps.com
*.generatvbucks.com
*.khanscademy.org
*.massheathchoices.com
*.myjetblupluscard.com
*.mynatgenpoicy.com
*.mypsegbenfits.com
*.pearsinrealize.com
*.reachmeonp.com
*.sloapartmentsclassettlement.com
*.tomssuprisesale.com
*.tricktretwin.com
*.uchjarvis.com
*.uclaheathcybersettlement.com
*.usbanktcoasettlement.com
*.walmartacedemycard.com
*.windsorhourlysettlment.com
*.wwwavivamymoney.co.uk
*.wwwcrackerbarrel-listens.com
*.wwwettlementinfo.com
*.wwwhalosinsurance.com
*.wwwmarriottbonvoy.com
*.wwwt-vision.com
*.wwwvalenciaflorida.com
anesthesiologistphysician.com
arrowhwadadvance.com
aveenowassettlement.com
bmymadrerisasettlement.com
bnmadrerisasettlement.com
bnymadreisasettlement.com
bnymadrerisasettlemeny.com
bnymadrerisasettlrment.com
bnymadrerisasetttlement.com
bnymadrerosasettlement.com
bnymadrersasettlement.com
bnymadrfxerisasettlement.com
bnymadrrisasettlement.com
bnymadrsettlement.com
bnymarderisasettlement.com
bnymarerisasettlement.com
bnymdrerisasettlement.com
brinkmoneyallaccess.com
chrysleremissionssettelment.com
coatingservicessurvey.com
copervisionpromotions.com
dcunivetse.com
dgcustomerfrst.com
familyfuzz.com
fedexemployeesuserrsettlement.com
frotrowed.com
gamestopcodssweeps.com
generatvbucks.com
khanscademy.org
massheathchoices.com
myjetblupluscard.com
mynatgenpoicy.com
mypsegbenfits.com
pearsinrealize.com
reachmeonp.com
sloapartmentsclassettlement.com
tomssuprisesale.com
tricktretwin.com
uchjarvis.com
uclaheathcybersettlement.com
usbanktcoasettlement.com
walmartacedemycard.com
windsorhourlysettlment.com
wwwavivamymoney.co.uk
wwwcrackerbarrel-listens.com
wwwettlementinfo.com
wwwhalosinsurance.com
wwwmarriottbonvoy.com
wwwt-vision.com
wwwvalenciaflorida.com

Other certificates including the domain name massheathchoices.com

(limited to 100 certificates)
lovekniting.com
massheathchoices.com
mynatgenpolocy.com
massheathchoices.com
massheathchoices.com
marianoscredicard.com

Certificate

The complete raw certificate details for massheathchoices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326544135616845057902086131272386137402390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 08:13:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 08:13:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'massheathchoices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723412502936746765740369361836526635472287153105252641539894395722373649862108286357923900822657329031549856661242063234523528127036066778798490903033885484865248646357635322514782887197910135356585214407871666121937668593720821431951138060439679002147494111779751018949533787515990767794707109795225804918210914847316371113243912644748210495017330366167543527870498242098048179456472594581443929029411841426790617792653460549086152822444110703261984405950786915505981808261530631473881657822832023840589345453431470884571641152462256225204798703131311048810642072982803649361441162388938598368473276617137189257635619356708419784079215207002185075722634529952676591277114729279202366765904947846798122790014003286703580010593217051355797238089882578315800133588577237822096835293419159886011248630948471229112947415873084574285708466817420097676851431734905047734243343443688799606415846732126600750380976419056539822443916767232446657464588206936260453576158819687772202146155161336258568577199081483935159750752215012250276767172973965084084822407929163494532354165423149878316624908309399905579021423137411287411938050154182867407089699627928228236193081149177738716832614675430159266908348191047645354238795226751857627316784799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1a5e5d288474c20867398e4a4081b956b0c5a3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anesthesiologistphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrowhwadadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aveenowassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmymadrerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnmadrerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadreisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrerisasettlemeny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrerisasettlrment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrerisasetttlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrerosasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrersasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrfxerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrrisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymadrsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymarderisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymarerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymdrerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkmoneyallaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chrysleremissionssettelment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coatingservicessurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copervisionpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcunivetse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgcustomerfrst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familyfuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedexemployeesuserrsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frotrowed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamestopcodssweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generatvbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khanscademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massheathchoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjetblupluscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynatgenpoicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypsegbenfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pearsinrealize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reachmeonp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sloapartmentsclassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomssuprisesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tricktretwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uchjarvis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uclaheathcybersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usbanktcoasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmartacedemycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windsorhourlysettlment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwavivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcrackerbarrel-listens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwettlementinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwhalosinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmarriottbonvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwt-vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwvalenciaflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anesthesiologistphysician.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowhwadadvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aveenowassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmymadrerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnmadrerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadreisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrerisasettlemeny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrerisasettlrment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrerisasetttlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrerosasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrersasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrfxerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrrisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymadrsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymarderisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymarerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymdrerisasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkmoneyallaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrysleremissionssettelment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coatingservicessurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copervisionpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcunivetse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dgcustomerfrst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyfuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedexemployeesuserrsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frotrowed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamestopcodssweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatvbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanscademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massheathchoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjetblupluscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynatgenpoicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypsegbenfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsinrealize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachmeonp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloapartmentsclassettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomssuprisesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tricktretwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchjarvis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uclaheathcybersettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usbanktcoasettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmartacedemycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windsorhourlysettlment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwavivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcrackerbarrel-listens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwettlementinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwhalosinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmarriottbonvoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt-vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwvalenciaflorida.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d154cb8b10000040300473045022040b669fadd4e266381a7b8fbedd91225f09eb3b0582c8566b280e0e57f8ea4640221008d6e74f1a57cdbca5363ad54e0a4739e63a8444d68f0e88e5fed0a765b241e4a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d154cbacc0000040300473045022100a746eff76127d6c4df73b48632dd3ba57cce19202ac337f8488222b9a2a610db02202569ad61d6db1eafa146a2bb5566ff2e5c0f610a96d36a686e50d832b224bbfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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