mindfulmoves.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:50:75:9b:2a:31:e3:c5:34:76:a0:81:84:9e:57:90:3e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mindfulmoves.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:50:75:9b:2a:31:e3:c5:34:76:a0:81:84:9e:57:90:3e
Serial Number (int): 319291809057352032087834516515486841671742
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:53:bf:98:2e:15:af:f3:79:c6:d0:e6:1f:cd:b5:dc:33:f3:a9:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:ba:41:6e:b4:d3:98:17:74:77:0c:b3:14:9d:49:f6:c0:58:39:02
Fingerprint (sha256): b8:e2:70:d8:02:87:0c:cd:95:cc:bc:33:b5:61:a9:f9:ae:09:6d:40:e0:b9:6e:22:31:13:0b:39:e6:32:af:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mindfulmoves.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mindfulmoves.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

48hd.com
9times5.com
airwarn.com
apollogym.com
asiangreentea.com
aurorasportsmedicine.com
azrents.com
bearpure.org
bernstein.org
brighamyounguniversity.org
buyrentleasedomains.com
christeningbib.com
circlethis.com
crackaxlecanyon.com
daddywanted.com
drisland.com
durhamstemcells.com
economicnomad.com
ekoarts.org
expertpromotions.com
feastoverfamine.com
fresnostemcells.com
georgiaflights.com
givlingscam.org
goodluckgamblers.com
guerapa.com
heatonic.com
hikoki.com
holdmycamera.com
hotttpinkcbd.com
injectionmoldedcase.com
introdyne.com
jointpainminneapolis.com
kamagrasking.com
kcubgaming.com
kentuckysportsdoctors.com
localescrowagents.com
longislandchristmaslightestimate.com
mainestemcelltreatmentcenters.com
mindfulmoves.com
negozitelefonia.com
richmondsportsdoctors.com
saltlakecitycabinets.com
stemcellminnesota.com
thecspnetwork.com
truepublishers.com
websiteacquisitions.com
womenspennyloafers.com
www.48hd.com
www.9times5.com
www.airwarn.com
www.apollogym.com
www.asiangreentea.com
www.aurorasportsmedicine.com
www.azrents.com
www.bearpure.org
www.bernstein.org
www.brighamyounguniversity.org
www.buyrentleasedomains.com
www.christeningbib.com
www.circlethis.com
www.crackaxlecanyon.com
www.daddywanted.com
www.drisland.com
www.durhamstemcells.com
www.economicnomad.com
www.ekoarts.org
www.expertpromotions.com
www.feastoverfamine.com
www.fresnostemcells.com
www.georgiaflights.com
www.givlingscam.org
www.goodluckgamblers.com
www.guerapa.com
www.heatonic.com
www.hikoki.com
www.holdmycamera.com
www.hotttpinkcbd.com
www.injectionmoldedcase.com
www.introdyne.com
www.jointpainminneapolis.com
www.kamagrasking.com
www.kcubgaming.com
www.kentuckysportsdoctors.com
www.localescrowagents.com
www.longislandchristmaslightestimate.com
www.mainestemcelltreatmentcenters.com
www.mindfulmoves.com
www.negozitelefonia.com
www.richmondsportsdoctors.com
www.saltlakecitycabinets.com
www.stemcellminnesota.com
www.thecspnetwork.com
www.truepublishers.com
www.websiteacquisitions.com
www.womenspennyloafers.com
www.xn--sstminen-0zaac.com
www.ziptourl.com
xn--sstminen-0zaac.com
ziptourl.com

Other certificates including the domain name mindfulmoves.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mindfulmoves.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN2DCCDMCgAwIBAgISA6pQdZsqMePFNHaggYSeV5A+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjUwMTU3MjJaFw0y
MDAzMjQwMTU3MjJaMBsxGTAXBgNVBAMTEG1pbmRmdWxtb3Zlcy5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzx2VxI3wSgirmJXyPEg4bVFRZUbH
4FSM23utsYdkLSC8fSuNM1zhwa2k4mzHJKew8Rwbw9qYOdf4QhPveCZMOI4wwhZx
fCKWI2ff7A7nZDNv2DMi+7LgMPMDQWvwQBLC3qxFpaK348WlfDyMrPJEHUdgaJY0
p9W/S+lyDvjpIC7xXCnvTQg+kID7iLm1SNvChXmEqEIH8iM/g/4vCsmPzVlP50jd
wFUqV6QHg14mHPpeKSH2zfu4CBETVZEAKb0ieusDztwRsM7nSSyzz27e5jAte6aB
nG8r76+WkEfILb00wxKBAIi0v+dkrDMathyrAFwuWlZYqYzrQ4JE3V2XAgMBAAGj
ggrlMIIK4TAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIRTv5guFa/zecbQ5h/Ntdwz
86nIMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggiZBgNVHREEggiQMIIIjIIINDhoZC5jb22CCzl0aW1lczUuY29tggth
aXJ3YXJuLmNvbYINYXBvbGxvZ3ltLmNvbYIRYXNpYW5ncmVlbnRlYS5jb22CGGF1
cm9yYXNwb3J0c21lZGljaW5lLmNvbYILYXpyZW50cy5jb22CDGJlYXJwdXJlLm9y
Z4INYmVybnN0ZWluLm9yZ4IaYnJpZ2hhbXlvdW5ndW5pdmVyc2l0eS5vcmeCF2J1
eXJlbnRsZWFzZWRvbWFpbnMuY29tghJjaHJpc3RlbmluZ2JpYi5jb22CDmNpcmNs
ZXRoaXMuY29tghNjcmFja2F4bGVjYW55b24uY29tgg9kYWRkeXdhbnRlZC5jb22C
DGRyaXNsYW5kLmNvbYITZHVyaGFtc3RlbWNlbGxzLmNvbYIRZWNvbm9taWNub21h
ZC5jb22CC2Vrb2FydHMub3JnghRleHBlcnRwcm9tb3Rpb25zLmNvbYITZmVhc3Rv
dmVyZmFtaW5lLmNvbYITZnJlc25vc3RlbWNlbGxzLmNvbYISZ2VvcmdpYWZsaWdo
dHMuY29tgg9naXZsaW5nc2NhbS5vcmeCFGdvb2RsdWNrZ2FtYmxlcnMuY29tggtn
dWVyYXBhLmNvbYIMaGVhdG9uaWMuY29tggpoaWtva2kuY29tghBob2xkbXljYW1l
cmEuY29tghBob3R0dHBpbmtjYmQuY29tghdpbmplY3Rpb25tb2xkZWRjYXNlLmNv
bYINaW50cm9keW5lLmNvbYIYam9pbnRwYWlubWlubmVhcG9saXMuY29tghBrYW1h
Z3Jhc2tpbmcuY29tgg5rY3ViZ2FtaW5nLmNvbYIZa2VudHVja3lzcG9ydHNkb2N0
b3JzLmNvbYIVbG9jYWxlc2Nyb3dhZ2VudHMuY29tgiRsb25naXNsYW5kY2hyaXN0
bWFzbGlnaHRlc3RpbWF0ZS5jb22CIW1haW5lc3RlbWNlbGx0cmVhdG1lbnRjZW50
ZXJzLmNvbYIQbWluZGZ1bG1vdmVzLmNvbYITbmVnb3ppdGVsZWZvbmlhLmNvbYIZ
cmljaG1vbmRzcG9ydHNkb2N0b3JzLmNvbYIYc2FsdGxha2VjaXR5Y2FiaW5ldHMu
Y29tghVzdGVtY2VsbG1pbm5lc290YS5jb22CEXRoZWNzcG5ldHdvcmsuY29tghJ0
cnVlcHVibGlzaGVycy5jb22CF3dlYnNpdGVhY3F1aXNpdGlvbnMuY29tghZ3b21l
bnNwZW5ueWxvYWZlcnMuY29tggx3d3cuNDhoZC5jb22CD3d3dy45dGltZXM1LmNv
bYIPd3d3LmFpcndhcm4uY29tghF3d3cuYXBvbGxvZ3ltLmNvbYIVd3d3LmFzaWFu
Z3JlZW50ZWEuY29tghx3d3cuYXVyb3Jhc3BvcnRzbWVkaWNpbmUuY29tgg93d3cu
YXpyZW50cy5jb22CEHd3dy5iZWFycHVyZS5vcmeCEXd3dy5iZXJuc3RlaW4ub3Jn
gh53d3cuYnJpZ2hhbXlvdW5ndW5pdmVyc2l0eS5vcmeCG3d3dy5idXlyZW50bGVh
c2Vkb21haW5zLmNvbYIWd3d3LmNocmlzdGVuaW5nYmliLmNvbYISd3d3LmNpcmNs
ZXRoaXMuY29tghd3d3cuY3JhY2theGxlY2FueW9uLmNvbYITd3d3LmRhZGR5d2Fu
dGVkLmNvbYIQd3d3LmRyaXNsYW5kLmNvbYIXd3d3LmR1cmhhbXN0ZW1jZWxscy5j
b22CFXd3dy5lY29ub21pY25vbWFkLmNvbYIPd3d3LmVrb2FydHMub3Jnghh3d3cu
ZXhwZXJ0cHJvbW90aW9ucy5jb22CF3d3dy5mZWFzdG92ZXJmYW1pbmUuY29tghd3
d3cuZnJlc25vc3RlbWNlbGxzLmNvbYIWd3d3Lmdlb3JnaWFmbGlnaHRzLmNvbYIT
d3d3LmdpdmxpbmdzY2FtLm9yZ4IYd3d3Lmdvb2RsdWNrZ2FtYmxlcnMuY29tgg93
d3cuZ3VlcmFwYS5jb22CEHd3dy5oZWF0b25pYy5jb22CDnd3dy5oaWtva2kuY29t
ghR3d3cuaG9sZG15Y2FtZXJhLmNvbYIUd3d3LmhvdHR0cGlua2NiZC5jb22CG3d3
dy5pbmplY3Rpb25tb2xkZWRjYXNlLmNvbYIRd3d3LmludHJvZHluZS5jb22CHHd3
dy5qb2ludHBhaW5taW5uZWFwb2xpcy5jb22CFHd3dy5rYW1hZ3Jhc2tpbmcuY29t
ghJ3d3cua2N1YmdhbWluZy5jb22CHXd3dy5rZW50dWNreXNwb3J0c2RvY3RvcnMu
Y29tghl3d3cubG9jYWxlc2Nyb3dhZ2VudHMuY29tgih3d3cubG9uZ2lzbGFuZGNo
cmlzdG1hc2xpZ2h0ZXN0aW1hdGUuY29tgiV3d3cubWFpbmVzdGVtY2VsbHRyZWF0
bWVudGNlbnRlcnMuY29tghR3d3cubWluZGZ1bG1vdmVzLmNvbYIXd3d3Lm5lZ296
aXRlbGVmb25pYS5jb22CHXd3dy5yaWNobW9uZHNwb3J0c2RvY3RvcnMuY29tghx3
d3cuc2FsdGxha2VjaXR5Y2FiaW5ldHMuY29tghl3d3cuc3RlbWNlbGxtaW5uZXNv
dGEuY29tghV3d3cudGhlY3NwbmV0d29yay5jb22CFnd3dy50cnVlcHVibGlzaGVy
cy5jb22CG3d3dy53ZWJzaXRlYWNxdWlzaXRpb25zLmNvbYIad3d3LndvbWVuc3Bl
bm55bG9hZmVycy5jb22CGnd3dy54bi0tc3N0bWluZW4tMHphYWMuY29tghB3d3cu
emlwdG91cmwuY29tghZ4bi0tc3N0bWluZW4tMHphYWMuY29tggx6aXB0b3VybC5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW86
/MgXAAAEAwBHMEUCIE4yNAQt7kQIwNshgt3DdfVTDDNNjl07ReayXsSLCTpYAiEA
jnHs9C2GPkKriQqbNGWQAqAOw2FSUFRtb7koNf3xrN0AdgCyHgXMi6LNiiBOh2b5
K7mKJSBna9r6cOeySVMt74uQXgAAAW86/MgqAAAEAwBHMEUCIQCWxbA78XoMt0h1
LKDAn7kKdR5zFfhr4nVsRf4svfSfEQIgC0H5nK3r+0tf0sHxP6mrrkyqw/NFYrjY
l1CRmcz4p9cwDQYJKoZIhvcNAQELBQADggEBAFzgdmIGkfSpOmlHR05mndI5u7Vq
8+Nxs5QNFx9oO8OxGWlUgreUuF24E01K9k7D3uuhSqVf13feNYcHH91wuwtg4Lnl
QfY7saidgUw1RvoHUmS9c91iB7X/3g+jNZedQUzMGbfLVl5M0Dpg3OH71vRBVL3C
Vbi7eWW4dhGGLTsToZr7ZjXcJ4n/wPwaVxNZ3BXuDSGyjX4Zl3vokxcGJ14bXfK6
ejt4QKOrq55OE4zZ62+oY7rQ8Pwu+36mwHq9p5oE4rdDsqgxbWDcrQ4vIckOwHeS
uGgtrMpGRrHuNDplCURMtrWzVycvoqJoOHGk2qaBMoxS6D0kQRCeBZ5pwIo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs8dlcSN8EoIq5iV8jxI
OG1RUWVGx+BUjNt7rbGHZC0gvH0rjTNc4cGtpOJsxySnsPEcG8PamDnX+EIT73gm
TDiOMMIWcXwiliNn3+wO52Qzb9gzIvuy4DDzA0Fr8EASwt6sRaWit+PFpXw8jKzy
RB1HYGiWNKfVv0vpcg746SAu8Vwp700IPpCA+4i5tUjbwoV5hKhCB/IjP4P+LwrJ
j81ZT+dI3cBVKlekB4NeJhz6Xikh9s37uAgRE1WRACm9InrrA87cEbDO50kss89u
3uYwLXumgZxvK++vlpBHyC29NMMSgQCItL/nZKwzGrYcqwBcLlpWWKmM60OCRN1d
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319291809057352032087834516515486841671742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 01:57:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 01:57:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mindfulmoves.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26107223315391736950019810480888925052482187173876204745515408057004581636316426360223676610641776730873599502111275306799519805902978780630245365435208332689499201819996359975546683396507450994528245805862509095806267831580737298284889519667923052664765516126568461579710538500786377239531740538994177383303397045437915397094148735626095608013223040399281758692523609945097681829751684819759374910565665728537811051211099609216970384229011927874448004970422765581875433423142641971749751726638327377107065518093418107320465212281726925270118276716135513703158650170142686482015599817626668139089447976815374171463063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8453bf982e15aff379c6d0e61fcdb5dc33f3a9c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '48hd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9times5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airwarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apollogym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiangreentea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurorasportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearpure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighamyounguniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyrentleasedomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christeningbib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlethis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackaxlecanyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daddywanted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durhamstemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economicnomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feastoverfamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnostemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiaflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givlingscam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodluckgamblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guerapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hikoki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdmycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotttpinkcbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'injectionmoldedcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainminneapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamagrasking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcubgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckysportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localescrowagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandchristmaslightestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainestemcelltreatmentcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindfulmoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negozitelefonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakecitycabinets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecspnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truepublishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteacquisitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womenspennyloafers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.48hd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9times5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airwarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apollogym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asiangreentea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurorasportsmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearpure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brighamyounguniversity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyrentleasedomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christeningbib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circlethis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crackaxlecanyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daddywanted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.durhamstemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economicnomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ekoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expertpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feastoverfamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fresnostemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.georgiaflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.givlingscam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodluckgamblers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guerapa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heatonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hikoki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holdmycamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotttpinkcbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.injectionmoldedcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.introdyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainminneapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamagrasking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kcubgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kentuckysportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localescrowagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longislandchristmaslightestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainestemcelltreatmentcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mindfulmoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.negozitelefonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakecitycabinets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellminnesota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecspnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truepublishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websiteacquisitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenspennyloafers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--sstminen-0zaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ziptourl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sstminen-0zaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziptourl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f3afcc817000004030047304502204e3234042dee4408c0db2182ddc375f5530c334d8e5d3b45e6b25ec48b093a580221008e71ecf42d863e42ab890a9b34659002a00ec3615250546d6fb92835fdf1acdd007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3afcc82a000004030047304502210096c5b03bf17a0cb748752ca0c09fb90a751e7315f86be2756c45fe2cbdf49f1102200b41f99cadebfb4b5fd2c1f13fa9abae4caac3f34562b8d897509199ccf8a7d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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