*.mindandheart.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1e:ff:1e:dc:34:17:51:30:6f:e0:0d:bf:03:31:32:d8:f5 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.mindandheart.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:ff:1e:dc:34:17:51:30:6f:e0:0d:bf:03:31:32:d8:f5
Serial Number (int): 358996728108757243643880006033332803655925
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e1:04:dd:5d:05:a8:9e:69:56:14:95:1a:77:0f:39:e5:13:6a:16:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:4e:87:ca:b4:3a:cd:ef:81:17:f9:8e:cc:5e:7f:e1:2e:20:78:7e
Fingerprint (sha256): a4:75:a7:d3:87:0a:d9:d3:8f:e0:b4:e5:c8:1b:18:4f:90:91:7f:29:85:16:85:ff:e2:ad:b7:6e:56:42:b3:7e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.mindandheart.org

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mindandheart.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bayonnesmile.com
*.bestsydneyurologists.net
*.bluebasilisk.com
*.bluemountainmanor.com
*.carbonfriendly.org
*.chaire-data-scientist.fr
*.chasecsutoras.com
*.cmnaturaldesigns.com
*.cocden.com
*.countryriverhomes.com
*.creativewoodfloors.net
*.crisprahead.org
*.dappleandgray.com
*.digitalbarrett.com
*.earthwindfireyoga.com
*.ecomedservices.com
*.engineering-complex-systems.fr
*.fidalgoukulelenetwork.com
*.galstyanlaw.com
*.garciawelding.com
*.hableather.com
*.hard2findtoys.com
*.heartofamustang.com
*.ishanvenkat.com
*.kimturver.com
*.lowinformationlawmaker.com
*.master-data-sciences.fr
*.mindandheart.org
*.miquirofisico.com
*.natividadfermin.com
*.nekosrx.com
*.onlinestatisticalconsulting.com
*.persegallery.com
*.pursuingpatrick.com
*.serpstacker.com
*.smallflea.com
*.tgmedi.com
*.thirdhalfsoccer.com
*.trianglemarketingclub.com
bayonnesmile.com
bestsydneyurologists.net
bluebasilisk.com
bluemountainmanor.com
carbonfriendly.org
chaire-data-scientist.fr
chasecsutoras.com
cmnaturaldesigns.com
cocden.com
countryriverhomes.com
creativewoodfloors.net
crisprahead.org
dappleandgray.com
digitalbarrett.com
earthwindfireyoga.com
ecomedservices.com
engineering-complex-systems.fr
fidalgoukulelenetwork.com
galstyanlaw.com
garciawelding.com
hableather.com
hard2findtoys.com
heartofamustang.com
ishanvenkat.com
kimturver.com
lowinformationlawmaker.com
master-data-sciences.fr
mindandheart.org
miquirofisico.com
natividadfermin.com
nekosrx.com
onlinestatisticalconsulting.com
persegallery.com
pursuingpatrick.com
serpstacker.com
smallflea.com
tgmedi.com
thirdhalfsoccer.com
trianglemarketingclub.com

Other certificates including the domain name mindandheart.org

(limited to 100 certificates)
*.sciman.us
mindandheart.org
*.picsbypaula.com
mindandheart.org
mindandheart.org
mindandheart.org
mindandheart.org
web13.tigertech.biz
*.pollavote.com
mindandheart.org
*.cthulu.co.uk
*.reformandride.com
*.reformandride.com
*.ashevillejungcenter.org
web13.tigertech.biz
*.mindandheart.org
mindandheart.org
*.ashevillejungcenter.org
*.fortrexstructures.com
*.reformandride.com
web13.tigertech.biz
*.girlsamplified.org
mindandheart.org
web13.tigertech.biz

Certificate

The complete raw certificate details for *.mindandheart.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUZID2tiF2SGnvHNJF1
NjuMZlTlO1P065z4XuVlPoKT8lvxqSfZMyyYAn0B768y50QhMBeYdIup/JUfjRZS
3Ddfokq2Hl3oC/FFmXpSxm/pDPnQJk95IvXJziGqam9NpuVrXoRR1g09c0Ts8EO7
qmqD/P5HqZJdqcoImDBYBAAFdtyOiJS/Eaa5DZXzG2YgBMXsM85Zze9vDsqSrlBN
eJw+O2lxPknea3cYt9nI8oFtl+8Xp3NN+lPPKWnQXPKl1ZSC6YYvXcr1z4bj9vgS
2i3yIA6gvECkVuoXtmpWmY3IN3YxeJ3NDiMycgLL2oWxkNV0El1Ymiy5p3g/PF7E
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358996728108757243643880006033332803655925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 08:03:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-19 08:03:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mindandheart.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433482804235389991372466963032475268422776637501221706805808108443276405408086437007123520790351795026189291767800519952191080351077113062946575016952581007871834121250379986628030630601404241394487980401038766242137969403421884610258149199476502122119391511766373396475652704821989943909217521435231363471416277095685826482988715268061549264213687752663693291406993137602363932318579986407878519464750335084686306942068133317589642996889718218919880973140952023382351499833769059461446082139745390977799394744787732344562886686192277935009501418437943815561782055176733895829969045224011228570384774865594454295787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e104dd5d05a89e695614951a770f39e5136a16e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayonnesmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsydneyurologists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebasilisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluemountainmanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbonfriendly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaire-data-scientist.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasecsutoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmnaturaldesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countryriverhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativewoodfloors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crisprahead.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dappleandgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalbarrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthwindfireyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecomedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engineering-complex-systems.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fidalgoukulelenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galstyanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garciawelding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hableather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hard2findtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartofamustang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishanvenkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimturver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowinformationlawmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.master-data-sciences.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindandheart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miquirofisico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natividadfermin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nekosrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinestatisticalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.persegallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pursuingpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serpstacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smallflea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgmedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirdhalfsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trianglemarketingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayonnesmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsydneyurologists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebasilisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluemountainmanor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonfriendly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaire-data-scientist.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasecsutoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmnaturaldesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countryriverhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativewoodfloors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisprahead.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dappleandgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalbarrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthwindfireyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecomedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineering-complex-systems.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidalgoukulelenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galstyanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garciawelding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hableather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hard2findtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartofamustang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishanvenkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimturver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowinformationlawmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master-data-sciences.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindandheart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miquirofisico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natividadfermin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nekosrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinestatisticalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persegallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pursuingpatrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serpstacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallflea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgmedi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdhalfsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trianglemarketingclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001699f7d6031000004030047304502203daec8bcb0e5dbc66086aafd347e9d3ba88ec4de115b2a9b2e7e8efd1e5c17d1022100cce3d80dd5300ed7cee7bdf004b0f426b2939d2e799ee226e3b5a443f20640ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001699f7d603a0000040300463044022006147eef8de905ed962e48234dfbe4ea9df0486137342299d19084404a87ab5b022004d1fa9e6de93054820eac8dfa23245810823fa7f799c44f2181e7b25e1d5ef8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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