xsa.co.za

Issued by R11

About this certificate

This digital certificate with serial number 04:e8:71:df:74:d0:76:1f:db:82:28:c7:be:5a:71:12:7a:0e was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xsa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e8:71:df:74:d0:76:1f:db:82:28:c7:be:5a:71:12:7a:0e
Serial Number (int): 427546015867697388441217152606358278928910
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b1:20:9a:51:7a:bf:00:56:c8:30:6c:61:16:1c:08:50:e3:60:03:f6
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 3b:68:72:df:76:0d:e8:02:e0:27:9f:04:36:1e:d2:16:2f:7d:18:f2
Fingerprint (sha256): 1c:01:05:a4:33:cd:ee:10:38:8f:86:89:cd:cb:e6:7b:aa:0f:c7:a9:69:a5:7d:a6:da:0b:e3:e2:4a:56:b7:ac

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate xsa.co.za

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xsa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affordabledesignerapparel.com
araujostudios.com
arbitrage3.com
arbitragegps.com
arbitrageurs.it
ardmuir.com
aspectium.news
ayurvedaforum.in
azld29gop.org
balejo.com
bestteachers.net
blaschka.com
boothlaw.law
christianattorney.org
cleanmaterial.com
clickle.com
coalitionforcatholicfathers.org
computerblogs.com
coolbeach.net
ctk.co.in
cybercasinos.net
daisakuikeda.com
dakotastream.net
digitaltown.org
discipletruth.org
docmedicine.com
domainsmeca.com
dont-get-zapped.com
filehosthub.com
findmymp.com.au
forloren.com
gawitnessingjosh.statenationals.us
gethertoys.com
greendragonpoker.com
habitatsformonarchs.com
heavy.pics
hempcbdhoney.com
hgj.co.in
hillcities.com
hvactampafl.com
industrialhempamerica.com
jesusthevegan.com
karurclassifieds.in
landpeek.com.au
lasdc.in
libertyisland.net
lrnchurch.com
medalert.com.au
miamibeachrealestatecompany.com
missionmrtg.com
movxact.com
neopearls.com
nh-dmnd.com
njpublic.statenationals.us
njskylights.com
o-y.in
onecortland.net
oromarket.com
parabolicdish.com
peacelegacy.net
pianolounge.com
planagers.com
printstitch.com
quepedo.com
restorationpac.store
retirement401krollovers.com
roundbox.info
rturner.org
rxsugarlife.com
ryangaze.com
sanantoniotexasnewhomes.com
sexmails.at
silkenvoice.com
simplesugarnaturally.com
smutwebcams.com
taliaferrocounty.com
thefarmreport.com
theplan.org
tickets24.cmcsmen.net
universitylouisiana.com
verobeach.net
vintet.com
wardfordelegate.com
watermarkfarm.us
wrian.com
www.mygadirectlender.com
xsa.co.za

Other certificates including the domain name xsa.co.za

(limited to 100 certificates)
aqq3.arina-the-artist.com
xsa.co.za
anri.tauns.com
aqq3.arina-the-artist.com
aqq3.arina-the-artist.com
anri.tauns.com
xsa.co.za
xsa.co.za
xsa.co.za
phantom-immobiliser.com.shepherdingcenter.com.xsa.co.za
xsa.co.za
xsa.co.za
anri.tauns.com
aqq3.arina-the-artist.com
xsa.co.za
aqq3.arina-the-artist.com
xsa.co.za
xsa.co.za
xsa.co.za
anri.tauns.com
anri.tauns.com
cenatti.com.xsa.co.za
xsa.co.za
xsa.co.za
xsa.co.za
anri.tauns.com
aqq3.arina-the-artist.com
xsa.co.za
xsa.co.za
anri.tauns.com
xsa.co.za

Certificate

The complete raw certificate details for xsa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnDAfmk0s5cRUrnuRw5I
bsZz79xf4QbCyZh3qwrxftm9AgKdfsnViz3AUVLcm797sQpxWA/ITN4SDDtds7ee
GHD8lUy315+frnMxud/+L5aXZgNykFAXc/8cDoOW05DWKTI2Te2xGoC7DbegplzS
ReP1ORQojPsklsiN/8PyT1M9xUqYFlKYUdSAHD1YI7mYx//ieJiqiuNhtLgY6bE9
GQ3sDqtCxCf85DVhYv7pCGG3J+nxrau3GxWnRIuTUvRUXCNg2mDsxUF1A2w5jT59
uBvKMZ+uC+A72rWs9kSSghQmXZkEQ6QrLdcGnt2w7fhyD6IEDAdooZFWXCK/MhVe
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427546015867697388441217152606358278928910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 17:23:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 17:23:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xsa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22021065112466212197655962967246785103430117537205206558007639793725413083260050744150965941906838302352274375793548524856847109335320999855911971791030585245886509036290444254436697825220204077762639778638300361836189948234870250122352541657625800489572840306608510278435684500563278231272876484336809925872698148377177918466508277703852591016782838021229341975873741520205187558527619210526368410877584364440474053867489797611143468733471161250495524763634540372573018318376238473130183958618829975931533296701623256288338258247901466621857529812986835696865880783979804376661612087454041422106136484679380098178639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1209a517abf0056c8306c61161c0850e36003f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1571 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordabledesignerapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'araujostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragegps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmuir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayurvedaforum.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azld29gop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestteachers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boothlaw.law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianattorney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanmaterial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalitionforcatholicfathers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computerblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolbeach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctk.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybercasinos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisakuikeda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakotastream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaltown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discipletruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsmeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dont-get-zapped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filehosthub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmymp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forloren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gawitnessingjosh.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gethertoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendragonpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitatsformonarchs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavy.pics'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempcbdhoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvactampafl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrialhempamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusthevegan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karurclassifieds.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landpeek.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasdc.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyisland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrnchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medalert.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamibeachrealestatecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionmrtg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movxact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neopearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nh-dmnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njpublic.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njskylights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-y.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onecortland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oromarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parabolicdish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacelegacy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianolounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printstitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quepedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restorationpac.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement401krollovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundbox.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rturner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryangaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniotexasnewhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmails.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silkenvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplesugarnaturally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smutwebcams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taliaferrocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefarmreport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets24.cmcsmen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universitylouisiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verobeach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardfordelegate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkfarm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mygadirectlender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff3f14bb300000403004730450221009d53fd1f17014c1cf63b585724fb3c396ae339c3301302e95f8e962920bbea3a022072efa2a1aef917384f37e022d66de5a1815a3128a08ca3620fabaaf7d543d7a9007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff3f14cb0000004030047304502210089bb86bba83b81016599918e9ea0af12b2ea574a0a445848cccb6779af6081fe022022e9e1d923b1e95121ef180dcb65d416e5a816fdfcd8717b6d034cf161a2fbd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00969ec2e43c8e4f2bf33d91261492359b37c0761024f2db63bd09f494225bfb871d1901f9f8be1e7838162b3c11a9054f326667041567f133f9d66ace64e3a0f160c56c30206f8da8d12d71da58d16ab851033057834ddd835866a1d867736bed26ef49dcddd689186c6d8ecc7251e97025a16e7843fe44f856a3abebe240efb1a340c6d150c921f227a0677c0071d42c7b0071d77238064c06f7328d36443949d7414f6e1980a07c00c32b86e7bb68310e264a5cdcdfe3b9d1d455417a8b050c5e9e2ce1259d906151f66f222ed44cdfe7e3bdd46a4a91d0fe314a97160fe62ff9b67c9ee6bbeaccf1654c258d248cac9e93a09ceadf94e0520e0a22312a9d60