www.stemcellsrochester.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0d:09:42:6b:4f:b4:c4:99:f3:1e:69:0f:ea:a3:2a:21:41 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.stemcellsrochester.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:09:42:6b:4f:b4:c4:99:f3:1e:69:0f:ea:a3:2a:21:41
Serial Number (int): 352885122417100711560590011784139714994497
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 64:4b:db:a5:5a:7a:4f:d4:5b:cd:96:57:19:b5:8a:9a:8b:8a:31:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:2c:b3:52:5f:45:50:47:9e:63:a0:33:1b:16:0b:94:7d:42:01:be
Fingerprint (sha256): ca:24:1f:57:e8:e3:11:58:62:bf:ef:d5:a3:6a:99:9e:5d:f1:4e:d8:72:ad:ec:74:04:57:1a:fd:a3:4b:0e:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.stemcellsrochester.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stemcellsrochester.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2fawarden.net
aboutlipo.com
bioequivalence.net
farmandplay.com
fdw.info
gotcbdoil.net
hydrosuit.com
jointpainneworleans.com
kaswari.net
longislandsecuritycompany.com
polestaraudio.com
receivable.in
savina.co
stemcellsrochester.com
trani.co
www.2fawarden.net
www.aboutlipo.com
www.bioequivalence.net
www.farmandplay.com
www.fdw.info
www.gotcbdoil.net
www.hydrosuit.com
www.jointpainneworleans.com
www.kaswari.net
www.longislandsecuritycompany.com
www.polestaraudio.com
www.receivable.in
www.savina.co
www.stemcellsrochester.com
www.trani.co

Other certificates including the domain name stemcellsrochester.com

(limited to 100 certificates)
stemcellstennessee.com
purewatercenter.com
www.gurkhaforces.com
www.stemcellswestvirginia.com
vklad.com
goldcoinexplorer.com
www.transmediaproducers.com
www.allusugar.com
visionaryspecs.com
www.insurtechlawyer.com
stemcellssiouxfalls.com
www.hoveringhealer.com
www.stemcellsrochester.com
www.reddogdemon.com
westharrison.menu
canadaolympics.com
www.grafenwoehr.com
evalilawyer.com
www.kingrooter.com
www.stemcellsrochester.com
www.maconstemcell.com
www.jeffgallagher.com
www.txtvideocreator.com

Certificate

The complete raw certificate details for www.stemcellsrochester.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXjCCBkagAwIBAgISBA0JQmtPtMSZ8x5pD+qjKiFBMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAzMDkxNTIwNTVaFw0yMzA2MDcxNTIwNTRaMCUxIzAhBgNVBAMT
Gnd3dy5zdGVtY2VsbHNyb2NoZXN0ZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA59wyZlQEjUaUHAjD2aQufYcG+9RQqCAh0B40DpT4ZJQow586
48yXyFM88Bcujz5cn6Nl8YbGetOcxsIt8g97vrFWYPRlH8Z/sgvL4RPQ7ewGIvY5
dqC6G0XpcON3T1sGMuFQXM+Kf2qLDWtLLEtjc9/nEhvBLlxpb8Y5ItMX0VXaUA9j
2vXGcHVVT8paI0OSXgSJpHUtcG+RXk+CBFBRXwEk0se8VcVZxyRgVLwBNyQ0eIv6
582QjSHzN9yaRzwTYPc79lvUwBq5BNsNGSav+D647VfAMwDJRtPlQhX/pwBT0aUj
UWU08HS0AdBezxxspp9WWDjvcCatLLlp/vfcTwIDAQABo4IEeTCCBHUwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBRkS9ulWnpP1FvNllcZtYqai4oxTjAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCAkcGA1UdEQSCAj4wggI6gg0yZmF3YXJkZW4ubmV0gg1h
Ym91dGxpcG8uY29tghJiaW9lcXVpdmFsZW5jZS5uZXSCD2Zhcm1hbmRwbGF5LmNv
bYIIZmR3LmluZm+CDWdvdGNiZG9pbC5uZXSCDWh5ZHJvc3VpdC5jb22CF2pvaW50
cGFpbm5ld29ybGVhbnMuY29tggtrYXN3YXJpLm5ldIIdbG9uZ2lzbGFuZHNlY3Vy
aXR5Y29tcGFueS5jb22CEXBvbGVzdGFyYXVkaW8uY29tgg1yZWNlaXZhYmxlLmlu
gglzYXZpbmEuY2+CFnN0ZW1jZWxsc3JvY2hlc3Rlci5jb22CCHRyYW5pLmNvghF3
d3cuMmZhd2FyZGVuLm5ldIIRd3d3LmFib3V0bGlwby5jb22CFnd3dy5iaW9lcXVp
dmFsZW5jZS5uZXSCE3d3dy5mYXJtYW5kcGxheS5jb22CDHd3dy5mZHcuaW5mb4IR
d3d3LmdvdGNiZG9pbC5uZXSCEXd3dy5oeWRyb3N1aXQuY29tght3d3cuam9pbnRw
YWlubmV3b3JsZWFucy5jb22CD3d3dy5rYXN3YXJpLm5ldIIhd3d3Lmxvbmdpc2xh
bmRzZWN1cml0eWNvbXBhbnkuY29tghV3d3cucG9sZXN0YXJhdWRpby5jb22CEXd3
dy5yZWNlaXZhYmxlLmlugg13d3cuc2F2aW5hLmNvghp3d3cuc3RlbWNlbGxzcm9j
aGVzdGVyLmNvbYIMd3d3LnRyYW5pLmNvMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAejKMVNi3LbYg6jjgUh7p
hBZwMhOFTTvSK8E6V6NS61IAAAGGxyzvAwAABAMARzBFAiA6bRay3j6Sf01hGpze
F9ngITnHRyg9lwVHfYSeI3kHNwIhANPHF4RGmydn7vEmzGCgkLFk+dSBkhDRIP1S
Jl7luYPmAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGGxyzv
HQAABAMARzBFAiEAwFGWpvw/VhXQ+qDRvoXkJxLcHmf1uJJl+3y856nNoBkCIGMA
As2KWcGn87seiqCyl9eFdHhFsSzwLDwSpdOv5zcuMA0GCSqGSIb3DQEBCwUAA4IB
AQBrBtNr3PQxNMoJKLVhkqN0lMkd0PqFSD05039fr8rznqwMscU6JS+3RIFad0W2
vgr1q9ItgWQiRPY66ChkosRIRlraUNUEhWqJaJxAiVhNeCccy6fq6II4Bdww3aKf
CDMSzunDIfTdV3PSIKVyj3bpu328kyUL5gnjeD6NFrfwoQcGvLdN/9vR1QO230XG
a00zeQfUGugaUV2tTUNGRxksTyy97yMbBodqCFN5EcPiu9lfTU+a9yo/mORrufbe
H7e/8HrN2R+QDo24ZOP7w89hA3KwxaGRvaZnmwmPBjjvHpxOgvhAz02Rx5Yn6pXv
56scd3ZFReanQihSFbsQWX8U
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59wyZlQEjUaUHAjD2aQu
fYcG+9RQqCAh0B40DpT4ZJQow58648yXyFM88Bcujz5cn6Nl8YbGetOcxsIt8g97
vrFWYPRlH8Z/sgvL4RPQ7ewGIvY5dqC6G0XpcON3T1sGMuFQXM+Kf2qLDWtLLEtj
c9/nEhvBLlxpb8Y5ItMX0VXaUA9j2vXGcHVVT8paI0OSXgSJpHUtcG+RXk+CBFBR
XwEk0se8VcVZxyRgVLwBNyQ0eIv6582QjSHzN9yaRzwTYPc79lvUwBq5BNsNGSav
+D647VfAMwDJRtPlQhX/pwBT0aUjUWU08HS0AdBezxxspp9WWDjvcCatLLlp/vfc
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352885122417100711560590011784139714994497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 15:20:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 15:20:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.stemcellsrochester.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29269631572630276568216452259796609316375207597745187836743828864028701511056349682318901476750458584345047032160821995169973079076056786987241211336850857117817502488182503920897223854363601065159420703464629864706522787979559348836851990242108063691256945500176786808692989495900702664522104542371849350199715496010825284895330814881616458654950735731053250083327640302790957670862887511228320205087880855510228369300073764882070533400909974117648458547755011464470731127128177622248236617965317166066187038103750977276171344036686621183164560159493149003668148356919801951397266244340157552159890061169604309802063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							644bdba55a7a4fd45bcd965719b58a9a8b8a314e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (574 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2fawarden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutlipo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioequivalence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmandplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdw.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotcbdoil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydrosuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainneworleans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaswari.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandsecuritycompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polestaraudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receivable.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savina.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellsrochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trani.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2fawarden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutlipo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bioequivalence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmandplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdw.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotcbdoil.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydrosuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainneworleans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaswari.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longislandsecuritycompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polestaraudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.receivable.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savina.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellsrochester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trani.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186c72cef03000004030047304502203a6d16b2de3e927f4d611a9cde17d9e02139c747283d9705477d849e23790737022100d3c71784469b2767eef126cc60a090b164f9d4819210d120fd52265ee5b983e6007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186c72cef1d0000040300473045022100c05196a6fc3f5615d0faa0d1be85e42712dc1e67f5b89265fb7cbce7a9cda0190220630002cd8a59c1a7f3bb1e8aa0b297d785747845b12cf02c3c12a5d3afe7372e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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