sportstherapynewyork.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:7a:74:d7:82:0d:d0:71:75:36:72:a5:e1:77:d3:4f:f9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportstherapynewyork.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:7a:74:d7:82:0d:d0:71:75:36:72:a5:e1:77:d3:4f:f9
Serial Number (int): 345549374917695891401275667908261743644665
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:43:c6:41:82:16:5a:7b:e9:a9:57:38:3b:33:e9:c4:82:39:22:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:6b:30:99:89:5c:5f:5a:3c:6f:82:bc:c9:43:e0:f9:2e:39:24:b6
Fingerprint (sha256): b1:ae:da:e6:65:ca:7b:5d:e0:c2:e7:8d:8f:28:67:c4:50:29:ee:c6:90:bf:38:67:8b:1b:71:bd:77:39:d9:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportstherapynewyork.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportstherapynewyork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aiego.com
air-conditioned-case.com
amalcan.com
amourvideo.com
bbuco.com
beark.com
cagbank.com
ckdco.com
commercioeuropeo.com
custom-frame.com
cuwco.com
dbyco.com
dentistfargo.com
dlyco.com
eulessdental.com
ffoco.com
giglioli.com
investmentbankingdesignation.com
islandwindowtinting.com
jimmydrio.com
ksuco.com
kvbco.com
lryco.com
lwyco.com
macbaseball.com
morgig.com
mpuco.com
needaproblem.com
oikco.com
oklahomastemcell.com
orangewebstudio.com
paypalbingo.com
pobco.com
ppuco.com
qloco.com
ranchosandiego.com
rosh-hashanah.com
rwwco.com
skylersatellite.com
smashask.com
spelbolagsguiden.com
sportstherapynewyork.com
summercampsprogram.com
tfmco.com
wdwco.com
wggco.com
wguco.com
wisconsinstemcell.org
wiwco.com
www.aiego.com
www.air-conditioned-case.com
www.amalcan.com
www.amourvideo.com
www.bbuco.com
www.beark.com
www.cagbank.com
www.ckdco.com
www.commercioeuropeo.com
www.custom-frame.com
www.cuwco.com
www.dbyco.com
www.dentistfargo.com
www.dlyco.com
www.eulessdental.com
www.ffoco.com
www.giglioli.com
www.investmentbankingdesignation.com
www.islandwindowtinting.com
www.jimmydrio.com
www.ksuco.com
www.kvbco.com
www.lryco.com
www.lwyco.com
www.macbaseball.com
www.morgig.com
www.mpuco.com
www.needaproblem.com
www.oikco.com
www.oklahomastemcell.com
www.orangewebstudio.com
www.paypalbingo.com
www.pobco.com
www.ppuco.com
www.qloco.com
www.ranchosandiego.com
www.rosh-hashanah.com
www.rwwco.com
www.skylersatellite.com
www.smashask.com
www.spelbolagsguiden.com
www.sportstherapynewyork.com
www.summercampsprogram.com
www.tfmco.com
www.wdwco.com
www.wggco.com
www.wguco.com
www.wisconsinstemcell.org
www.wiwco.com
www.xn--kundtjnst-02a.com
xn--kundtjnst-02a.com

Other certificates including the domain name sportstherapynewyork.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sportstherapynewyork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtxahlQe4YH/83HnV+nL
UVgmvYkzGUeS0tp7Ynyoeeq4SkTGSkbTgWIr7WGeQvwxAzfaH7tJtiFltLvm4zfD
cj74gTlVWAv/Kn7BlnKqrspJds4/m751FxswJKt1vecjWln1XOR5HWC39G99RQ+V
To6WDeF9hdeKsjU/3+1EWCYqZE/AEv79LpEVInynNgcHL2CAyD6vKg+jbq10l6kv
ovgZoLESUZNdJS3P94zQ2SIMXPDofncYK+fMYx1jrQBKmRrEPIJ8z1PzyznDWDXY
FNzrP8LVR69G561Er4NrrvGak1Dqnqq4b3qPZH8O6jC1pO8di5wwNQdTaDQuO+G5
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345549374917695891401275667908261743644665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 03:57:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 03:57:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportstherapynewyork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22074125480095099786832315261328717525167410047979309122256604681407568505323610726529270734860490495529526666990239234305856391300342348078513569815448799969018765076893549043800773164863588697844591119741155303372517610454870582315151280098769666396530675614324379578902144167502060294672791979774857327390659641830565858501781221146492693655530590243133498874579972842147444700854304412546914622757577198077216734681467282911576193338954447833340006763611732957566471019441988469935367204062154455468888388398960333579587568228425129490187065097890203407600637479876867259532778006768865915221451256416139466619163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd43c64182165a7be9a957383b33e9c48239228d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1772 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air-conditioned-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amalcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amourvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cagbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercioeuropeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-frame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eulessdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giglioli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentbankingdesignation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandwindowtinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jimmydrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvbco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lryco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needaproblem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangewebstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paypalbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pobco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchosandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosh-hashanah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylersatellite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smashask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spelbolagsguiden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportstherapynewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercampsprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wggco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wguco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisconsinstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.air-conditioned-case.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amalcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amourvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cagbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckdco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commercioeuropeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custom-frame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dentistfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eulessdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ffoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giglioli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investmentbankingdesignation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandwindowtinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimmydrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ksuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kvbco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lryco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lwyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morgig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needaproblem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oikco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oklahomastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orangewebstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paypalbingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pobco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppuco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchosandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosh-hashanah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rwwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skylersatellite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smashask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spelbolagsguiden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportstherapynewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summercampsprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wggco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wguco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wisconsinstemcell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiwco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--kundtjnst-02a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kundtjnst-02a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c277d841f0000040300483046022100eedfe414c020d8bf24238f16c2d9f0fdd769be89fa66a554583e8704e93bf5ea022100801c4975d25bdb8e1b569821bdd3bfafab5f72443ddf8ed4c19373e09e1eaf82007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c277d843e00000403004730450221008df5218d247734cbd915981360d059c8e1e5df0eefed1dea5785dfdbf366ea5d02203f4719ed68aa65f1db28fa998d83ead54e8bdcf4909a6fea7dbc5fc50696b500
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007420bc94abd7e9814d1bcc2dd961fa38c164d1f35066efefec302fec11fadfdcde7e0e78d82fa86cc680e415384c86a4a97d9530124ad38593cdf2a128b9d46c0af3bb6f67838e709671977aa7f5eddddf21a5746a9a6c43229f406fb08450d46c3fda14c46b82df044d51548df5d0a8b272609f3786f2fba39ec7960e41df5acff9d6c6a00f9bb1e614c894879ede9ec37e3e93a92a89b8cee89193a1fd91be2b305de843ee29aed26717d21861046838496caf39c77b6a5ec309efdd99302c49507cd9947a0e2f6f62f420e48a2b82d1daa34c8bb57e0156a447ab3d4ffacebd8bf3690809e0c47e7b704b4b79312fa96c3f0e4e5957085426183e3a0b5b55