minnesotasportsmed.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3b:5b:24:a6:95:f2:ac:dd:85:06:4c:7d:2f:79:39:d5:e1 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=minnesotasportsmed.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3b:5b:24:a6:95:f2:ac:dd:85:06:4c:7d:2f:79:39:d5:e1
Serial Number (int): 281534667492679538656956953337257153648097
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5a:28:0c:b8:d3:e8:5f:fe:70:07:77:79:ab:f3:a7:44:63:1d:a3:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:5c:cf:03:bf:e5:48:de:1c:ff:a7:bf:83:1e:23:db:e3:92:21:0d
Fingerprint (sha256): 96:cf:95:28:e7:e9:2f:e9:90:ab:b5:91:d4:39:17:30:98:03:66:c0:3d:07:f4:94:7b:67:78:44:3f:a1:19:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate minnesotasportsmed.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minnesotasportsmed.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alskndb.com
catholicmovieguide.com
daubersauce.com
imanagehub.com
ledgerdecentralised.com
minnesotasportsmed.com
neoaster.org
nichewebsiteguide.com
qzen.org
skosh.one
sportsmedicineloveland.com
sumosword.com
terrifying-peace.com
www.alskndb.com
www.catholicmovieguide.com
www.daubersauce.com
www.imanagehub.com
www.ledgerdecentralised.com
www.minnesotasportsmed.com
www.neoaster.org
www.nichewebsiteguide.com
www.qzen.org
www.skosh.one
www.sportsmedicineloveland.com
www.sumosword.com
www.terrifying-peace.com
www.xn--8dbbla8cc.com
www.xn--9dba6apsld.com
xn--8dbbla8cc.com
xn--9dba6apsld.com

Other certificates including the domain name minnesotasportsmed.com

(limited to 100 certificates)
www.exploredrivegrowth.co
778237.com
www.vianapolipizza.com
www.faircanna.com
dianaherrera.com
www.campotosto.net
www.minnesotasportsmed.com
ketobar.org
www.arch-enemy.com
alliantsoftware.com
draw21.com
papromocode.com
minnesotasportsmed.com
www.onomealand.com
www.convertpsdtojoomla.com
danburylimoservice.com
alliantsoftware.com
polywipe.com
minnesotasportsmed.com
www.xn--ceb4ag.com
428.me
www.123divorce.fr
rundi.bible
morphology.org
freespinza.com
dietid.world
nvlc.com

Certificate

The complete raw certificate details for minnesotasportsmed.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVjCCBj6gAwIBAgISAztbJKaV8qzdhQZMfS95OdXhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDkyMDA2MjhaFw0yNDA4MDcyMDA2MjdaMCExHzAdBgNVBAMT
Fm1pbm5lc290YXNwb3J0c21lZC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCsqCRyvoOGVquYNAaluL06soviSF9wnELtQIoLmE5NFWVrovxcmwss
WzQdSM/lEq5kLo9zK1u+2nKwOkp6YWLVMl90Zffs5f4x0/Wt+j2sT4M/GniBXi13
oJMvOCJauuvPngz8+Sb9Eu57FlU2N9wy1CM+6aDFFgww15pyAR45d2Of3MH0b4wV
Ywerbov7JTHTyRBJ0BUuBrHj7Tc751SCu58Xx2Do7j3LnqyPmyEpox5NaV6TMMZz
kW9MImIwlNVDL+kcxHfn0jcq6YOjEn5VEjEkA966IF0CUjvqqTJDnE4orRpuaYC0
CdNLWxV8B4MsWKh3FPPJFzPhtFWBQBKNAgMBAAGjggR1MIIEcTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFFooDLjT6F/+cAd3eavzp0RjHaMAMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIICewYDVR0RBIICcjCCAm6CC2Fsc2tuZGIuY29tghZjYXRob2xp
Y21vdmllZ3VpZGUuY29tgg9kYXViZXJzYXVjZS5jb22CDmltYW5hZ2VodWIuY29t
ghdsZWRnZXJkZWNlbnRyYWxpc2VkLmNvbYIWbWlubmVzb3Rhc3BvcnRzbWVkLmNv
bYIMbmVvYXN0ZXIub3JnghVuaWNoZXdlYnNpdGVndWlkZS5jb22CCHF6ZW4ub3Jn
gglza29zaC5vbmWCGnNwb3J0c21lZGljaW5lbG92ZWxhbmQuY29tgg1zdW1vc3dv
cmQuY29tghR0ZXJyaWZ5aW5nLXBlYWNlLmNvbYIPd3d3LmFsc2tuZGIuY29tghp3
d3cuY2F0aG9saWNtb3ZpZWd1aWRlLmNvbYITd3d3LmRhdWJlcnNhdWNlLmNvbYIS
d3d3LmltYW5hZ2VodWIuY29tght3d3cubGVkZ2VyZGVjZW50cmFsaXNlZC5jb22C
Gnd3dy5taW5uZXNvdGFzcG9ydHNtZWQuY29tghB3d3cubmVvYXN0ZXIub3Jnghl3
d3cubmljaGV3ZWJzaXRlZ3VpZGUuY29tggx3d3cucXplbi5vcmeCDXd3dy5za29z
aC5vbmWCHnd3dy5zcG9ydHNtZWRpY2luZWxvdmVsYW5kLmNvbYIRd3d3LnN1bW9z
d29yZC5jb22CGHd3dy50ZXJyaWZ5aW5nLXBlYWNlLmNvbYIVd3d3LnhuLS04ZGJi
bGE4Y2MuY29tghZ3d3cueG4tLTlkYmE2YXBzbGQuY29tghF4bi0tOGRiYmxhOGNj
LmNvbYISeG4tLTlkYmE2YXBzbGQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC
Cp/mZ0xaOnQAAAGPXy3QZQAABAMARzBFAiBYEozViNxNMnTjC8yDcNbh5MXvonqo
1KOUKx+VmQ+j0AIhAM30jUaJsnw6NA4WGw6ROopU4GxBND7LiWOP1l9d9mcUAHcA
3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+UlwAAAGPXy3RAQAABAMASDBG
AiEAi0hi1pwYOFuD9keaLRBAO42E2utpoElLTXEOJT7lnMcCIQDqZfpA/HA8Sk48
CEkoMsHyUKcREVe23J7M04y2ksvyKzANBgkqhkiG9w0BAQsFAAOCAQEAmbwMLYsY
y5I676BRPxBG0ycMedpv48GRwsHQ9abVcgROEWdtpWsl++ebRIPNg4vq/7IZFULZ
h7NkA+vLQNbMh9WeHZX/KwqO/1x2K4gs3D6gjynITpKV+EwWPFJTBE2NMAowe3Z8
zD8C2kZ7p9lwqP1FzBF5ExnuKznIdahJkAzWTSjNdKO7Icz0kp1YFG8o4VdJg0ZH
IS9HcYYePsSuIXT7I94FZl7K7HOBW9zoKG9FKaLJINQoPhOUd+l7OdbQnkrqNU+p
WtIw83aONKhoeQZMqKFQp2Ua+daXIwVaHNGLwvld6S4vaKS7OafkUFspUte7wTr8
+pIFikHYqBO2ZQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKgkcr6DhlarmDQGpbi9
OrKL4khfcJxC7UCKC5hOTRVla6L8XJsLLFs0HUjP5RKuZC6PcytbvtpysDpKemFi
1TJfdGX37OX+MdP1rfo9rE+DPxp4gV4td6CTLzgiWrrrz54M/Pkm/RLuexZVNjfc
MtQjPumgxRYMMNeacgEeOXdjn9zB9G+MFWMHq26L+yUx08kQSdAVLgax4+03O+dU
grufF8dg6O49y56sj5shKaMeTWlekzDGc5FvTCJiMJTVQy/pHMR359I3KumDoxJ+
VRIxJAPeuiBdAlI76qkyQ5xOKK0abmmAtAnTS1sVfAeDLFiodxTzyRcz4bRVgUAS
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281534667492679538656956953337257153648097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 20:06:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 20:06:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minnesotasportsmed.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21795902549948065509735034855110270837220297312003679957614729661726538921523041945507381552386426188938033915522990174497672918517451573620563130912074961033423835965470233675873879175763625587528168115720317288330357882149029525517972751906402418008987343957359098607737714511838062728855015644532427347968615754279774663081501840517414405856394047981874956690711179608858426759910101037494916105079220428725452706734494257169440796680281881079237162441830024350552640087678278527502789353445388418679986089855086138193521332084185062660651063671000121846920764937030599703608335441436181686847016575174852007170701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a280cb8d3e85ffe70077779abf3a744631da300
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alskndb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicmovieguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daubersauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imanagehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledgerdecentralised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoaster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nichewebsiteguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qzen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skosh.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicineloveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumosword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrifying-peace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alskndb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catholicmovieguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daubersauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imanagehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ledgerdecentralised.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minnesotasportsmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neoaster.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nichewebsiteguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qzen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skosh.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicineloveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumosword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrifying-peace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--8dbbla8cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--9dba6apsld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--8dbbla8cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--9dba6apsld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5f2dd0650000040300473045022058128cd588dc4d3274e30bcc8370d6e1e4c5efa27aa8d4a3942b1f95990fa3d0022100cdf48d4689b27c3a340e161b0e913a8a54e06c41343ecb89638fd65f5df66714007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f5f2dd10100000403004830460221008b4862d69c18385b83f6479a2d10403b8d84daeb69a0494b4d710e253ee59cc7022100ea65fa40fc703c4a4e3c08492832c1f250a7111157b6dc9eccd38cb692cbf22b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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