www.offshoulder.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:aa:18:f8:d8:7c:2c:fb:55:5f:c9:bd:e3:23:bc:9b:7c was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.offshoulder.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:aa:18:f8:d8:7c:2c:fb:55:5f:c9:bd:e3:23:bc:9b:7c
Serial Number (int): 287424416102869399026883035199134739766140
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:f9:90:90:17:33:bd:84:e8:6a:d9:8e:ab:5d:2f:ce:1b:72:08:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:51:0a:17:3c:2f:e7:fa:9c:2f:2a:b8:a3:ae:33:e2:fe:ae:bb:4b
Fingerprint (sha256): f0:31:3e:b2:de:1d:a9:67:64:cf:a1:aa:3d:3e:74:6d:7a:b3:c8:45:db:fb:53:51:17:55:97:bc:22:70:2b:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.offshoulder.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.offshoulder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aquachair.com
buildervr.com
cbd-vaporizer.com
chandr.com
chiropractorvancouver.com
christmascardsphoto.com
connecticutprp.com
credicap.com
cringestar.com
earstohear.com
electric-trimmer.com
gameulator.com
gotclear.com
greenbaysportsdoctor.com
greenbaystemcellcenter.com
kpopkshop.com
labotas.com
lushster.com
moosclimp.com
newarkstemcellcenter.com
non-geneticallymodifiedfoods.com
nyc420bar.com
offshoulder.com
paul-walker.com
pennsylvaniaprp.com
provosportsdoctor.com
realestatefractionalownership.com
rockheader.com
roof-estimator.com
tallahasseestemcellclinics.com
tamaralanier.com
tangiblegoods.com
uniquepoolsandspas.com
www.aquachair.com
www.buildervr.com
www.cbd-vaporizer.com
www.chandr.com
www.chiropractorvancouver.com
www.christmascardsphoto.com
www.connecticutprp.com
www.credicap.com
www.cringestar.com
www.earstohear.com
www.electric-trimmer.com
www.gameulator.com
www.gotclear.com
www.greenbaysportsdoctor.com
www.greenbaystemcellcenter.com
www.kpopkshop.com
www.labotas.com
www.lushster.com
www.moosclimp.com
www.newarkstemcellcenter.com
www.non-geneticallymodifiedfoods.com
www.nyc420bar.com
www.offshoulder.com
www.paul-walker.com
www.pennsylvaniaprp.com
www.provosportsdoctor.com
www.realestatefractionalownership.com
www.rockheader.com
www.roof-estimator.com
www.tallahasseestemcellclinics.com
www.tamaralanier.com
www.tangiblegoods.com
www.uniquepoolsandspas.com

Other certificates including the domain name offshoulder.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.offshoulder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pZX80iVPNr1TuKTrw2c
t1N2MTrmT4LUMvnpOEkhJloT/7dO+7Az9eNNA6y/3G27XHGzfql2aCheZD758BqT
AzPiabkkQjQlkXidIRtQCqI3ohkrKOJ6aPGcy/G48sATa6Z+z9DtwyAF2fp3rwPz
LnmR0t5c6Xp7sVlp9Bmb5F0thgIFF5uZwkFYnXq8tg812Kjc/zpS4aDX6IFEeKW8
ti6/JdqqI2pbVDrR7/TnujMUW4uU9Tc6W2gXdAX+DR+nth2BM+0XNXn1K9aWNxxV
6dNkprVxVyGyLJ0YG1zo8ED8Q00LqQd9jjqNePqX+UsGrrlXR++/7vST+9iLJV0D
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287424416102869399026883035199134739766140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 20:02:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 20:02:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.offshoulder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27594087653175840795012891029989544581719778153164820119949965010968301836700046944263607067343308246294399219442236483905847790219730921440558921079355800292747266898859891442197345397752083550767765092530203336624978074427133936393470878255112651528924784047858398065639309883914059846302217738592254051939307542072425523876473444035259199614269287429137819072553093492111282066782862893952028222628278236689189167678477030607626721693554206774014754430146840669467897473833734767795388256757134074374276741045652428147133428728243961048360803315024875368531428971126181929189496665360253661791343399311617856176951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39f990901733bd84e86ad98eab5d2fce1b720848
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1454 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquachair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildervr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbd-vaporizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chandr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiropractorvancouver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmascardsphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credicap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cringestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earstohear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electric-trimmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameulator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotclear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenbaysportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenbaystemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpopkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labotas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lushster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moosclimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newarkstemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-geneticallymodifiedfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyc420bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoulder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paul-walker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provosportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestatefractionalownership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockheader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roof-estimator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallahasseestemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamaralanier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangiblegoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniquepoolsandspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aquachair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildervr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbd-vaporizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chandr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chiropractorvancouver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christmascardsphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connecticutprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.credicap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cringestar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earstohear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electric-trimmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameulator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotclear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenbaysportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenbaystemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kpopkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.labotas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lushster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moosclimp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newarkstemcellcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.non-geneticallymodifiedfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyc420bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshoulder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paul-walker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennsylvaniaprp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.provosportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestatefractionalownership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockheader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roof-estimator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallahasseestemcellclinics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamaralanier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tangiblegoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniquepoolsandspas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de5d400c400000403004630440220612bbfaab48cbbd32d56d45e6e96c5e50ec6b2324dd905c45c8f61fcb65ef0d702200710662587805a19ce106d13af182e2a55a0654c6ab28c3471c3136e44e4f744007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016de5d400b60000040300473045022056c8d4fc7f86d1ce06f74004b97de1ba0b2624bd7d6d503df49a6752536e6c47022100bc82b7607165fc07a63bdf35e1f9928fd742e6393f9d79024df8cd1684a18d97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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