minneopolissportsdoctor.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fb:1a:a4:7a:3d:23:e4:17:1f:14:21:fd:6f:8b:d9:37:b0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=minneopolissportsdoctor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fb:1a:a4:7a:3d:23:e4:17:1f:14:21:fd:6f:8b:d9:37:b0
Serial Number (int): 346783145836309499072097567377062482229168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:05:f6:33:c2:fe:69:15:33:a4:fe:dc:3f:5d:7a:e5:64:34:b9:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:a7:a3:a1:d7:ac:c8:e2:7c:3c:8c:c2:ed:16:d4:36:bb:c7:2f:38
Fingerprint (sha256): 9a:c2:ac:42:fc:55:2c:05:38:a5:93:82:b0:18:3b:45:51:02:4f:3a:9b:13:6f:85:07:1d:ce:ee:a6:65:3e:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate minneopolissportsdoctor.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minneopolissportsdoctor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aligntek.com
attyoffices.com
australiaorganicbabypowder.com
camisoletop.com
chiefyear.com
cypherstorm.com
dawsonin.com
dcsportsdoctor.com
dduco.com
donateausedcar.com
dwilawesq.com
elizabethwharton.com
fetalimagingcenter.com
flatwork.com
fredericksportsdoctor.com
half-rack-cases.com
happybudtender.com
heartdoktor.com
hodldor.com
homehealthlawyer.com
ice-melter.com
insurancelawesquire.com
jerseysportsmedicine.com
kneesup.com
labrotties.com
lovedlikethis.com
marylandprp.com
minneopolissportsdoctor.com
mommyskitchenhelper.com
mortgageinterestdeduction.com
nebraskastemcellclinics.com
oglco.com
omni-corp.com
omwi.com
opthio.com
organicbeautyboxes.com
peacemakerdrones.com
petatravel.com
peuco.com
rawradar.com
rbjco.com
saltmaster.com
sportsmedicinelosangeles.com
supreme-commander.com
t2bp.com
thegulflawyer.com
tucsonstemcelldoctor.com
ubrco.com
whitesandshands.com
windraven.com
www.aligntek.com
www.attyoffices.com
www.australiaorganicbabypowder.com
www.camisoletop.com
www.chiefyear.com
www.cypherstorm.com
www.dawsonin.com
www.dcsportsdoctor.com
www.dduco.com
www.donateausedcar.com
www.dwilawesq.com
www.elizabethwharton.com
www.fetalimagingcenter.com
www.flatwork.com
www.fredericksportsdoctor.com
www.half-rack-cases.com
www.happybudtender.com
www.heartdoktor.com
www.hodldor.com
www.homehealthlawyer.com
www.ice-melter.com
www.insurancelawesquire.com
www.jerseysportsmedicine.com
www.kneesup.com
www.labrotties.com
www.lovedlikethis.com
www.marylandprp.com
www.minneopolissportsdoctor.com
www.mommyskitchenhelper.com
www.mortgageinterestdeduction.com
www.nebraskastemcellclinics.com
www.oglco.com
www.omni-corp.com
www.omwi.com
www.opthio.com
www.organicbeautyboxes.com
www.peacemakerdrones.com
www.petatravel.com
www.peuco.com
www.rawradar.com
www.rbjco.com
www.saltmaster.com
www.sportsmedicinelosangeles.com
www.supreme-commander.com
www.t2bp.com
www.thegulflawyer.com
www.tucsonstemcelldoctor.com
www.ubrco.com
www.whitesandshands.com
www.windraven.com

Other certificates including the domain name minneopolissportsdoctor.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for minneopolissportsdoctor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA172PiqjSnCJQ7Kj0MERM
OsFWBtlfSlAu7kuRRROUCjLVO3LNGRRHX3GhSMW/xr5EjD1Xx/D5f+rxYNfZq4ym
tdcau1HQalWY8rHs2HYMZiQz2srQzfP/c7bAOSOl63R9wOw+ki2zGqG0ljejbPE5
6vymT2o41lAQ/4u9BTmibAcowU93aotnuQCX7ZAMrfnHU0Ega0BG4dHiJ7WASgrN
wMv8f+dhW8g1ZN8/qtORkYfeRMH7uJBD35vDB/gbslRJrd5QsTiRLIOfME/fgVCW
AkxArR5zkr/+OWyXA7N1WaLfdTOCd+7fvAjE432REMl3bPiLG/TnSknuw5sYc1UP
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346783145836309499072097567377062482229168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 01:56:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 01:56:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minneopolissportsdoctor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27234711437463007908679185143333172011537782978937763924937439917369252659491979938789068311701884478503233816308164894187408401627822421194144781182265438012449924115844063150624332804906187547244103555012958862901792227664079115575971387244173493808970755896366798024142371477498687363165989078164952622801891403617779985234162054968530997915595813004244758507931830277774303308361648849736485737615831040725203971081301307859768742981495535160853353679005459104632009563974045618783764614598419862288751813033388383337277906965672509923134711957167292277519881064204908481399463256258232015588965304934998360788883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9005f633c2fe691533a4fedc3f5d7ae56434b9fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aligntek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attyoffices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australiaorganicbabypowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camisoletop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypherstorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawsonin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dduco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donateausedcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwilawesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethwharton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetalimagingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fredericksportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'half-rack-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happybudtender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartdoktor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodldor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homehealthlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ice-melter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancelawesquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseysportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kneesup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labrotties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovedlikethis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marylandprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneopolissportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mommyskitchenhelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgageinterestdeduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oglco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opthio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicbeautyboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacemakerdrones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petatravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbjco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinelosangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supreme-commander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2bp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegulflawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitesandshands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windraven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aligntek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attyoffices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.australiaorganicbabypowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camisoletop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiefyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypherstorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dawsonin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dcsportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dduco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donateausedcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dwilawesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elizabethwharton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fetalimagingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fredericksportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.half-rack-cases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.happybudtender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartdoktor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hodldor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homehealthlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ice-melter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insurancelawesquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseysportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kneesup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labrotties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovedlikethis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marylandprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneopolissportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mommyskitchenhelper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mortgageinterestdeduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskastemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oglco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omni-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opthio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicbeautyboxes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peacemakerdrones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petatravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rawradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbjco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinelosangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supreme-commander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t2bp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thegulflawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tucsonstemcelldoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubrco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whitesandshands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windraven.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c270f20cb00000403004830460221008d86738a80e132dc1da1dd3566a8015bd8f13ee6029af47d67d9504a09436462022100c08f903ce9d3cc50a570d089b21c9b1290886345761703457a80e5de1e4fa9cb00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c270f1eaa00000403004730450220042d07b5eb7d325dc9e7c8194fadc7ddc1226bdac1fa64da8e1dc11746f7f91a022100f5b63472c7f3fc9055a2978a90a34d5a12c2ca173f3a781f13a0e777c801bd2e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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