minneopolissportsdoctors.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:5c:6d:f3:f9:0c:f5:87:b1:a5:e5:c2:c5:8d:f9:be:43 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=minneopolissportsdoctors.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:5c:6d:f3:f9:0c:f5:87:b1:a5:e5:c2:c5:8d:f9:be:43
Serial Number (int): 300251907508594874132362961696800611352131
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:35:d6:a4:e9:a0:05:85:d1:47:cb:96:05:c4:83:c5:c0:7a:5b:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:fa:c7:e6:f0:9e:73:81:31:bc:1c:59:96:47:22:56:dc:46:ab:15
Fingerprint (sha256): b5:b2:2b:5e:ec:ba:a2:50:cb:2f:cd:e4:6b:5d:0c:d6:1f:a7:02:91:92:4d:b2:4a:a7:7d:c7:58:de:15:29:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate minneopolissportsdoctors.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minneopolissportsdoctors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

420giftsets.com
affordablepamperedpets.com
augmentedrealitylabels.com
bankforeclosuresdirect.com
bestrummyapps.com
bestsmokergifts.com
beststonergifts.com
bridesmaid-dress.com
casualtyinsurances.com
celebratorycreations.com
checkoutflows.com
classicalchristianparents.com
cybersecurityhackers.com
czechiapatriots.com
dallassportsdoctors.com
dissentergather.com
driedtears.com
elcaminodonuts.com
fulvicfocus.com
gatherdissenter.com
gobahrainpass.com
handymanaustin.com
hempscanner.com
hosierytights.com
icymisex.com
integralinvestmentmanagement.com
kokopelliart.com
lotterybumper.com
louisvillestemcelltreatmentcenters.com
masterbowler.com
minneopolissportsdoctors.com
newstritionfacts.com
paciflex.com
pass-throughdigitaldollarwallet.com
peoplepowerus.com
pollyesters.com
rachelweiss.com
rentbykredit.com
roxburymassachusetts.com
rusticwoodartist.com
sanfordhandyman.com
santabarber.com
sewercovers.com
skillofficer.com
smokergifts.com
soresubjects.com
step-mom.com
teenpattirules.com
testosteronekits.com
trendsix.com
www.420giftsets.com
www.affordablepamperedpets.com
www.augmentedrealitylabels.com
www.bankforeclosuresdirect.com
www.bestrummyapps.com
www.bestsmokergifts.com
www.beststonergifts.com
www.bridesmaid-dress.com
www.casualtyinsurances.com
www.celebratorycreations.com
www.checkoutflows.com
www.classicalchristianparents.com
www.cybersecurityhackers.com
www.czechiapatriots.com
www.dallassportsdoctors.com
www.dissentergather.com
www.driedtears.com
www.elcaminodonuts.com
www.fulvicfocus.com
www.gatherdissenter.com
www.gobahrainpass.com
www.handymanaustin.com
www.hempscanner.com
www.hosierytights.com
www.icymisex.com
www.integralinvestmentmanagement.com
www.kokopelliart.com
www.lotterybumper.com
www.louisvillestemcelltreatmentcenters.com
www.masterbowler.com
www.minneopolissportsdoctors.com
www.newstritionfacts.com
www.paciflex.com
www.pass-throughdigitaldollarwallet.com
www.peoplepowerus.com
www.pollyesters.com
www.rachelweiss.com
www.rentbykredit.com
www.roxburymassachusetts.com
www.rusticwoodartist.com
www.sanfordhandyman.com
www.santabarber.com
www.sewercovers.com
www.skillofficer.com
www.smokergifts.com
www.soresubjects.com
www.step-mom.com
www.teenpattirules.com
www.testosteronekits.com
www.trendsix.com

Other certificates including the domain name minneopolissportsdoctors.com

(limited to 100 certificates)
www.thedevilridesout.com
www.creaminteen.com
greatsaver.com
iguns.com
ot6.org
www.bitcoinspreadbet.com
www.mumbaiesports.com
pollyesters.com
centerforresponsibleparenting.org
coloradospringssportsdoctors.com
dakotasstemcelldoctors.com
botoxgiveaway.com
rachelweiss.com
www.groneds.com
implication.id
rentbykredit.com
cincinnaticarrental.com
bankforeclosuresdirect.com
www.newstritionfacts.com
minneopolissportsdoctors.com
www.jetomat.com
basicweddings.com
intelligator.com
borgotoscano.com
galaktik.com

Certificate

The complete raw certificate details for minneopolissportsdoctors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVtf7cJmwN7ZfoLyGmZl
tP3LqABRRyBXjIhf3G0FfnZW9DGv5+Sn7hERJ3NoMmd5TrtEAeL+Dv2VdiQhH1st
TBTA51lmGUccHvPpWMrcz9uKebeyxYblHiZMxR/pwjrwRorFL+uH1tdz7cb7r8Jn
wy2cuWbPh2WjaHvcRmX6KLBL9MLhbT2kmTekQJVsimydGkUHPGzeY2TRbL2aso8M
oHEkrult2nhSuM/6/4RkCVo9m4Myjl7g7eKw3mn6vdCMpOg6Aqn0kq51zZb0i2Je
KWQCMKG1nIHFI/x3FXal4W9a6CGQp+ZDtbsykuW935onkUQDEOTIUmySV/b+Emst
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300251907508594874132362961696800611352131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 15:32:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 15:32:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minneopolissportsdoctors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21884285313739061980133996312924653797764209489004571360347737737447165392358931430851551348844856836690300478399488185604074891295564478308228250012904576958213144419569468034873547739037372229954509859449874576109582231044194253696063745045354493432289602974351351106346550002860046711704215867223752480873152686017475780206930016281628015615555777143522153727917490151756403878522058730973176658173707539856340913544633680479654538201193531119025690657826092133343007919034738199992798310540327129371710793028411139400197615565759379724243217227239330052142187702812082461081188171766811303757687608071396038225307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a35d6a4e9a00585d147cb9605c483c5c07a5b80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420giftsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablepamperedpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augmentedrealitylabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankforeclosuresdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrummyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsmokergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beststonergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridesmaid-dress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualtyinsurances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebratorycreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkoutflows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicalchristianparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecurityhackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechiapatriots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallassportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dissentergather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driedtears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcaminodonuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulvicfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatherdissenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobahrainpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymanaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempscanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosierytights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icymisex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integralinvestmentmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokopelliart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotterybumper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisvillestemcelltreatmentcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterbowler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minneopolissportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstritionfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-throughdigitaldollarwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplepowerus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pollyesters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachelweiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentbykredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxburymassachusetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusticwoodartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanfordhandyman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santabarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewercovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soresubjects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'step-mom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenpattirules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testosteronekits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendsix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.420giftsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affordablepamperedpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augmentedrealitylabels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankforeclosuresdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestrummyapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsmokergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beststonergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridesmaid-dress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualtyinsurances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebratorycreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkoutflows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.classicalchristianparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cybersecurityhackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czechiapatriots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dallassportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dissentergather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.driedtears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elcaminodonuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fulvicfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gatherdissenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobahrainpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handymanaustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hempscanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hosierytights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icymisex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integralinvestmentmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kokopelliart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lotterybumper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.louisvillestemcelltreatmentcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterbowler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minneopolissportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newstritionfacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paciflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-throughdigitaldollarwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplepowerus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pollyesters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rachelweiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rentbykredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roxburymassachusetts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rusticwoodartist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanfordhandyman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santabarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sewercovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skillofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smokergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soresubjects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.step-mom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teenpattirules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testosteronekits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trendsix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001714609b46600000403004630440220437a58c91eb7a7311b8636398db178ba511210e4dd3d5589e86c36cb2413d91b02202d9e104c5a2f0e5095013de999161baada173e2104810bd1007902c9c670ad910076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001714609b4340000040300473045022100eb8468aab5a4b9f4b956adfe48bc452b521a3314103c8f95c141d6b991c5ed2c0220273f0dfc5a338ea998601ac3c041dbeb5bf0e3fc70fdd9db594b9a95fb10af1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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