connecticutsportsphysicians.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:64:5d:06:08:cd:00:7d:7b:c2:af:53:83:34:9d:aa:a6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connecticutsportsphysicians.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:64:5d:06:08:cd:00:7d:7b:c2:af:53:83:34:9d:aa:a6
Serial Number (int): 281887205616115111015550310382170367961766
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:69:e4:d8:9c:22:ed:2b:96:d0:37:93:21:2c:13:fa:11:34:9c:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 76:88:38:75:7c:98:14:92:93:99:ac:5c:ad:5f:f6:bd:8a:e4:f1:d1
Fingerprint (sha256): ec:3c:ed:33:53:c8:ec:8f:5e:11:45:64:b1:04:af:a7:84:03:58:b0:4a:86:9e:fc:4f:4d:63:ae:69:f4:35:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate connecticutsportsphysicians.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connecticutsportsphysicians.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adffarms.com
alabamastemcell.com
annarborsportsdoctors.com
annuityinterest.com
antique-tools.com
austincraiglist.com
biopeat.com
bloodyharvest.com
buffalostemcelldoctors.com
certifiednotaryservices.com
cheaphotelsandrooms.com
chilmark-pewter.com
collectquest.com
connecticutsportsphysicians.com
custom-boots.com
custommattresses.com
ddkco.com
dermacoat.com
dynabusiness.com
essentialsdepot.com
fastfoodfeast.com
fishingguideinkeywest.com
gelcover.com
gotillman.com
greencontentmanagement.com
iurk.com
massagingrecliners.com
medicinequest.com
mundoalimentario.com
newcasinoexpert.com
nordvindconsultant.com
pdqmovers.com
phorbit.com
projector-headlights.com
purduemascots.com
readyforgmat.com
registrationagreements.com
roof-inspections.com
samuelroberts.com
seeitbookit.com
servicesawards.com
slaymaster.com
smilingmirror.com
straightalphaguys.com
thebestbikes.com
tokenfork.com
top10keywest.com
truncheons.com
vrssistant.com
www.adffarms.com
www.alabamastemcell.com
www.annarborsportsdoctors.com
www.annuityinterest.com
www.antique-tools.com
www.austincraiglist.com
www.biopeat.com
www.bloodyharvest.com
www.buffalostemcelldoctors.com
www.certifiednotaryservices.com
www.cheaphotelsandrooms.com
www.chilmark-pewter.com
www.collectquest.com
www.connecticutsportsphysicians.com
www.custom-boots.com
www.custommattresses.com
www.ddkco.com
www.dermacoat.com
www.dynabusiness.com
www.essentialsdepot.com
www.fastfoodfeast.com
www.fishingguideinkeywest.com
www.gelcover.com
www.gotillman.com
www.greencontentmanagement.com
www.iurk.com
www.massagingrecliners.com
www.medicinequest.com
www.mundoalimentario.com
www.newcasinoexpert.com
www.nordvindconsultant.com
www.pdqmovers.com
www.phorbit.com
www.projector-headlights.com
www.purduemascots.com
www.readyforgmat.com
www.registrationagreements.com
www.roof-inspections.com
www.samuelroberts.com
www.seeitbookit.com
www.servicesawards.com
www.slaymaster.com
www.smilingmirror.com
www.straightalphaguys.com
www.thebestbikes.com
www.tokenfork.com
www.top10keywest.com
www.truncheons.com
www.vrssistant.com
www.yentanet.com
yentanet.com

Other certificates including the domain name connecticutsportsphysicians.com

(limited to 100 certificates)
mafamilylaw.com
www.weedkillerforlawns.com
www.jackbet.co
anocoat.com
89746.com
www.vipcomposites.com
www.garbage-cans.com
golosissimo.com
www.factoryoutletmalls.com
savvings.com
columbiastemcelldoctor.com
www.anuncios.mex.com
www.cannaadult.com
gosportsbet.org
tailgatevans.com
azoresventures.com
34172.com
www.subtxt.com
www.customrooftarps.com
www.miguelmorales.com
www.oklahomastemcells.com
connecticutsportsphysicians.com
boulderstemcells.com
austin-movers.com

Certificate

The complete raw certificate details for connecticutsportsphysicians.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZDS2wMzM2LqyOvp7Mzl
KTdEIeL8zbEefbQXFqWWuA/GbyhT16JFhyCKKi8zOanrX2q8UCgyIBc71C60EPgS
nj21L/MhAictt73ADTQgIBzgT8fItShefSkADBh6+8AHx3JN0szl6THZBsOCARS7
HWcmK61zHvZaCFwbuwp1s9vSfKj7+8OVSiUxKLrbnRceelLyK1cnYdM/nhSqarB0
Sjdt/sXX8mnmJ66vK4Drm03hWQqPQ4ZUlKVC6hmlCIF4x1wLnLApXyTxTuKb5poi
Rj9klHysy9/1zSznpi5NMzIlvJ0AufHWMkArGZAH2L52TxF/k9cFKq08NqtaNZm9
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281887205616115111015550310382170367961766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-14 08:11:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 08:11:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connecticutsportsphysicians.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24940361283962361361660992314299994874109638503273973280831216405474405686480501466981580204014770729509934137399646295007413393349716343744460380004694811147732491707929098232822446409597438288689488245388306672633176194680197115430817150776283304879859957293152713768801929493111455085609216993627217397550418716834874629780624193592241424170922891209261959387824923321045612043632918892298679761883682106942781057673406471108846013091048509055244700395637010811341104008223034289514991187867863812977194214290865334410992758217590057469536797914405985151201489412517353764616753815263459195437031395912218037566837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8569e4d89c22ed2b96d03793212c13fa11349cfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adffarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annarborsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annuityinterest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antique-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austincraiglist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodyharvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffalostemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiednotaryservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheaphotelsandrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilmark-pewter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutsportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-boots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custommattresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermacoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialsdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastfoodfeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingguideinkeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelcover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotillman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencontentmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iurk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massagingrecliners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicinequest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundoalimentario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcasinoexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordvindconsultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdqmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projector-headlights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purduemascots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readyforgmat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registrationagreements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roof-inspections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samuelroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeitbookit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slaymaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smilingmirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straightalphaguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top10keywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truncheons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrssistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adffarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamastemcell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annarborsportsdoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annuityinterest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antique-tools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.austincraiglist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biopeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodyharvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffalostemcelldoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certifiednotaryservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheaphotelsandrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chilmark-pewter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecticutsportsphysicians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custom-boots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custommattresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermacoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dynabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essentialsdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastfoodfeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fishingguideinkeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gelcover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotillman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greencontentmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iurk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.massagingrecliners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medicinequest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mundoalimentario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcasinoexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordvindconsultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdqmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projector-headlights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purduemascots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readyforgmat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registrationagreements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roof-inspections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samuelroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeitbookit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slaymaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smilingmirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.straightalphaguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebestbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokenfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.top10keywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truncheons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrssistant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yentanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yentanet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016befc0808600000403004630440220349794965520c8f3004b0220c177e4d3949326cd1f985aa5ce774107bea33644022070538b713366e95ffc9f2f389dfef854e025fd95279b77aa2e006aefcbd1b53700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016befc0829b0000040300483046022100d0efeafe116e700ab9cca4b01a9623cc1a077d7933db6fa61fa1d1aecda05012022100dd3bf7da2f9b08f09eb070ae9ea6dc6b20d77675cd727794292873a4b72c5876
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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