omnizant.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number cb:63:ae:f0:aa:a4:69:5d:73:e1:d6:4b:c7:e6:06:e1 was issued on by Sectigo Limited.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=omnizant.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): cb:63:ae:f0:aa:a4:69:5d:73:e1:d6:4b:c7:e6:06:e1
Serial Number (int): 270350868740174122025215693486461159137
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 23:5e:cf:ed:e7:79:b7:cf:15:99:75:74:4c:c7:c0:9c:83:4f:3c:44
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a5:38:46:77:7d:dc:27:30:aa:39:b8:ef:eb:d8:c6:69:f4:d7:0d:75
Fingerprint (sha256): 1c:96:de:b5:5e:f2:4e:a3:c9:6c:f3:90:f6:1e:e0:ff:12:fc:55:38:e6:21:03:10:ec:32:b8:27:40:e0:f5:45

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate omnizant.net

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for omnizant.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

omnizant.net
accidentlaw1.com
adamsingerlaw.com
africadirections.com
agrisvonnatzmerlaw.com
alexmtorres.com
alwaysyouradvocate.com
andrist-law.com
bakercounsel.com
berkmanlaw.com
bermanrosenbach.com
braccolaw.com
campanarolaw.com
chambersennis.com
clergyoncallministries.com
columbiaestateplanning.com
deportationlawyerny.com
donovanlawfirm.com
eaglawllc.com
elktonlaw.com
estatedocvault.com
estateplaninc.com
estateplanningredefined.com
fordhamlawoffice.com
foulstonlawoffice.com
foxlawny.com
fraleighlaw.com
gainesvilleestateplanninglawyer.com
gruberlawoffice.com
highlandspringslawyer.com
hinshawestateplanning.com
hwb-lawfirm.com
irvinetrustestateprobate.com
joelondonlaw.com
johnslawpc.com
johnwdennehy.com
jqvlaw.net
kfisherlaw.com
knoxlaw.nyc
kpshay.com
kulvinskaslaw.com
lafortunelawfirm.com
lambertilegal.com
langlaislaw.com
lawfsb.com
lawsonandbeck.com
legaljourney.com
levyphillipslaborlaw.com
lisagalvanlaw.com
littornolaw.com
luisgarcialaw.com
malialaw.com
martinlawoffices.com
mcclellanlegal.com
mdtlawoffice.com
medmalawyer.com
mifamilyappeals.com
myattorneynow.com
nationalconsumerlaw.com
nclglaw.com
ohfamilyattorney.com
oldtownattorney.com
pamelagwestesq.com
pandmlawyers.com
perezlg.com
phillipsballenger.com
piersonelderlaw.com
rbwemploylaw.com
restaurantesq.com
rosenblattesq.com
rslaw.net
sanderslegalgroup.com
sandiego-estateplanninglawyers.com
sandiegocafamilylaw.com
schildlaw.com
sctrustlaw.com
sgmblaw.com
shapiroinjuryattorney.com
simermeyer.com
sladeneighbors.com
soridlaw.com
speiserkrause.com
stonelawmn.com
sverdlovlaw.com
tallergallet.com
tgcwalaw.com
thinkhmalaw.com
trishgaddislaw.com
trslawfirm.com
trujillolawfirm.com
vaprobateattorney.com
viewpointlg.com
waypointplanning.com
wightlawoffice.com
www.maryannobrienattorney.com

Other certificates including the domain name omnizant.net

(limited to 100 certificates)
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net

Certificate

The complete raw certificate details for omnizant.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINWzCCDEOgAwIBAgIRAMtjrvCqpGldc+HWS8fmBuEwDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMzEyMDcwMDAwMDBaFw0yNDEyMDYyMzU5NTlaMBcxFTATBgNVBAMTDG9t
bml6YW50Lm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL8b4ifb
Cf6RogN5erdpUcK6porBHLemuSd2idKf352aWIpgmsN6fKg6ILPd9YR16l3F4hOU
C8NL2mQaF7nqPE4+Do+8rUsQMTAIQHP6TalSS4XvWRRlfwOKtRhOG+YwiDbP2Eia
kzf7iHstD5nxn36HLPBnJoHFyTRXO4czeNBk1GJzat7jP5TXK8fS7aQNgYhssI3E
soGS1PFmSZYT9lyWi9L+0nUfr7cv34eGjTl10zlXmbiMuNxPNtdIBU/FzUrv4Owp
WqfzSHDyFrjH3ieF+sfi0Vi5SMQb85uyiGbdNF/0BlTsg+tXbV6xJ53wejbgjhxY
O/Rq8fnaAy5G9x0CAwEAAaOCCicwggojMB8GA1UdIwQYMBaAFI2MXsRUrYrhd+mb
+ZsF4bgBjWHhMB0GA1UdDgQWBBQjXs/t53m3zxWZdXRMx8Ccg088RDAOBgNVHQ8B
Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICBzAlMCMGCCsGAQUFBwIBFhdo
dHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYQGCCsGAQUFBwEBBHgw
djBPBggrBgEFBQcwAoZDaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNB
RG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYX
aHR0cDovL29jc3Auc2VjdGlnby5jb20wggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB
ZwB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjEn5y/4AAAQD
AEYwRAIgF94iLh3P73dHw2DKwpAFoAcAJftYhBdOKUVZ0ylsJp0CIBGN0A+r3g2R
pbvTAv78C9TD4OE2i64Go4Ke5YD60B6NAHYAPxdLT9ciR1iUHWUchL4NEu2QN38f
hWrrwb8ohez4ZG4AAAGMSfnMdwAABAMARzBFAiARyLEXTBgvGI7jjtw2z0WY40w8
5tRZQHtPaSd6NqUg2QIhAPt6NP825JxdEvfyfHaFfjGNJm0mvM67QvTSCgtJ0r2J
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMSfnMMQAABAMA
RzBFAiBjl1mHKMTgZR5q132sqBfp6+GmplX3F+vDVZnTmbMQ3QIhAIYwZIzX15yp
pLEOs8VdXNCh098KINXH7h4qmUrj1cnNMIIHTwYDVR0RBIIHRjCCB0KCDG9tbml6
YW50Lm5ldIIQYWNjaWRlbnRsYXcxLmNvbYIRYWRhbXNpbmdlcmxhdy5jb22CFGFm
cmljYWRpcmVjdGlvbnMuY29tghZhZ3Jpc3Zvbm5hdHptZXJsYXcuY29tgg9hbGV4
bXRvcnJlcy5jb22CFmFsd2F5c3lvdXJhZHZvY2F0ZS5jb22CD2FuZHJpc3QtbGF3
LmNvbYIQYmFrZXJjb3Vuc2VsLmNvbYIOYmVya21hbmxhdy5jb22CE2Jlcm1hbnJv
c2VuYmFjaC5jb22CDWJyYWNjb2xhdy5jb22CEGNhbXBhbmFyb2xhdy5jb22CEWNo
YW1iZXJzZW5uaXMuY29tghpjbGVyZ3lvbmNhbGxtaW5pc3RyaWVzLmNvbYIaY29s
dW1iaWFlc3RhdGVwbGFubmluZy5jb22CF2RlcG9ydGF0aW9ubGF3eWVybnkuY29t
ghJkb25vdmFubGF3ZmlybS5jb22CDWVhZ2xhd2xsYy5jb22CDWVsa3Rvbmxhdy5j
b22CEmVzdGF0ZWRvY3ZhdWx0LmNvbYIRZXN0YXRlcGxhbmluYy5jb22CG2VzdGF0
ZXBsYW5uaW5ncmVkZWZpbmVkLmNvbYIUZm9yZGhhbWxhd29mZmljZS5jb22CFWZv
dWxzdG9ubGF3b2ZmaWNlLmNvbYIMZm94bGF3bnkuY29tgg9mcmFsZWlnaGxhdy5j
b22CI2dhaW5lc3ZpbGxlZXN0YXRlcGxhbm5pbmdsYXd5ZXIuY29tghNncnViZXJs
YXdvZmZpY2UuY29tghloaWdobGFuZHNwcmluZ3NsYXd5ZXIuY29tghloaW5zaGF3
ZXN0YXRlcGxhbm5pbmcuY29tgg9od2ItbGF3ZmlybS5jb22CHGlydmluZXRydXN0
ZXN0YXRlcHJvYmF0ZS5jb22CEGpvZWxvbmRvbmxhdy5jb22CDmpvaG5zbGF3cGMu
Y29tghBqb2hud2Rlbm5laHkuY29tggpqcXZsYXcubmV0gg5rZmlzaGVybGF3LmNv
bYILa25veGxhdy5ueWOCCmtwc2hheS5jb22CEWt1bHZpbnNrYXNsYXcuY29tghRs
YWZvcnR1bmVsYXdmaXJtLmNvbYIRbGFtYmVydGlsZWdhbC5jb22CD2xhbmdsYWlz
bGF3LmNvbYIKbGF3ZnNiLmNvbYIRbGF3c29uYW5kYmVjay5jb22CEGxlZ2Fsam91
cm5leS5jb22CGGxldnlwaGlsbGlwc2xhYm9ybGF3LmNvbYIRbGlzYWdhbHZhbmxh
dy5jb22CD2xpdHRvcm5vbGF3LmNvbYIRbHVpc2dhcmNpYWxhdy5jb22CDG1hbGlh
bGF3LmNvbYIUbWFydGlubGF3b2ZmaWNlcy5jb22CEm1jY2xlbGxhbmxlZ2FsLmNv
bYIQbWR0bGF3b2ZmaWNlLmNvbYIPbWVkbWFsYXd5ZXIuY29tghNtaWZhbWlseWFw
cGVhbHMuY29tghFteWF0dG9ybmV5bm93LmNvbYIXbmF0aW9uYWxjb25zdW1lcmxh
dy5jb22CC25jbGdsYXcuY29tghRvaGZhbWlseWF0dG9ybmV5LmNvbYITb2xkdG93
bmF0dG9ybmV5LmNvbYIScGFtZWxhZ3dlc3Rlc3EuY29tghBwYW5kbWxhd3llcnMu
Y29tggtwZXJlemxnLmNvbYIVcGhpbGxpcHNiYWxsZW5nZXIuY29tghNwaWVyc29u
ZWxkZXJsYXcuY29tghByYndlbXBsb3lsYXcuY29tghFyZXN0YXVyYW50ZXNxLmNv
bYIRcm9zZW5ibGF0dGVzcS5jb22CCXJzbGF3Lm5ldIIVc2FuZGVyc2xlZ2FsZ3Jv
dXAuY29tgiJzYW5kaWVnby1lc3RhdGVwbGFubmluZ2xhd3llcnMuY29tghdzYW5k
aWVnb2NhZmFtaWx5bGF3LmNvbYINc2NoaWxkbGF3LmNvbYIOc2N0cnVzdGxhdy5j
b22CC3NnbWJsYXcuY29tghlzaGFwaXJvaW5qdXJ5YXR0b3JuZXkuY29tgg5zaW1l
cm1leWVyLmNvbYISc2xhZGVuZWlnaGJvcnMuY29tggxzb3JpZGxhdy5jb22CEXNw
ZWlzZXJrcmF1c2UuY29tgg5zdG9uZWxhd21uLmNvbYIPc3ZlcmRsb3ZsYXcuY29t
ghB0YWxsZXJnYWxsZXQuY29tggx0Z2N3YWxhdy5jb22CD3RoaW5raG1hbGF3LmNv
bYISdHJpc2hnYWRkaXNsYXcuY29tgg50cnNsYXdmaXJtLmNvbYITdHJ1amlsbG9s
YXdmaXJtLmNvbYIVdmFwcm9iYXRlYXR0b3JuZXkuY29tgg92aWV3cG9pbnRsZy5j
b22CFHdheXBvaW50cGxhbm5pbmcuY29tghJ3aWdodGxhd29mZmljZS5jb22CHXd3
dy5tYXJ5YW5ub2JyaWVuYXR0b3JuZXkuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQB1
vvO16S0egtjmUowSBXExlXvD+IgfhBGw0LbfX2bZIuFTF/4HldXqa2/fhj61qh3y
JYPxpEdaOVulJBFhF7P4U0FrZVYfToEBIViQ7cQ7MANCZkplYqFuuJLluUADs3OV
zfBIdP2/b/vliLCcqkRg8jBuqlRt7sd4v02SJg1cHE+6FhPfwT4oQ4JQz+xRDTtE
9OV8SM93zXvlPjPior53Ao0ngJtZDlth0bBdkQUEGW61uqZOY1RwKFn6PqLjJY4O
jk1yKv+iF5VF+jHR12oljLzxq9N757DpdJ379nAA2ngmpQwEyurbSwz4xYdjGDhg
veADP2R1U/bUN3dI1fhV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxviJ9sJ/pGiA3l6t2lR
wrqmisEct6a5J3aJ0p/fnZpYimCaw3p8qDogs931hHXqXcXiE5QLw0vaZBoXueo8
Tj4Oj7ytSxAxMAhAc/pNqVJLhe9ZFGV/A4q1GE4b5jCINs/YSJqTN/uIey0PmfGf
focs8GcmgcXJNFc7hzN40GTUYnNq3uM/lNcrx9LtpA2BiGywjcSygZLU8WZJlhP2
XJaL0v7SdR+vty/fh4aNOXXTOVeZuIy43E8210gFT8XNSu/g7Clap/NIcPIWuMfe
J4X6x+LRWLlIxBvzm7KIZt00X/QGVOyD61dtXrEnnfB6NuCOHFg79Grx+doDLkb3
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270350868740174122025215693486461159137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'omnizant.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24125266075702058052300186588705745626703324219054550312935921274285704233988182969317547385151775322117797425336724510283643031230084750478368215189252022462482548379020998306645774232034597459953859473455642545010257719522705508777466789700825078762033467580980545752546307802108276981025379877113615791045498462357091825697045814601791905777802650621338164780357793124824359195500325294922062420122604269138283792122977014097647427123460227379604399881906644871276224805239561726523082504240626644354249297812392893022507680118460991087757840702318845034878695732146746038141934338909005416146474225433242166032157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							235ecfede779b7cf159975744cc7c09c834f3c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnizant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accidentlaw1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsingerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africadirections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrisvonnatzmerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexmtorres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwaysyouradvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrist-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakercounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berkmanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermanrosenbach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braccolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campanarolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambersennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clergyoncallministries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiaestateplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deportationlawyerny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donovanlawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglawllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elktonlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estatedocvault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estateplaninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estateplanningredefined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fordhamlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foulstonlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxlawny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraleighlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainesvilleestateplanninglawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruberlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandspringslawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hinshawestateplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwb-lawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irvinetrustestateprobate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelondonlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnslawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnwdennehy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jqvlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfisherlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knoxlaw.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpshay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulvinskaslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafortunelawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambertilegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langlaislaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawfsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsonandbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaljourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levyphillipslaborlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisagalvanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littornolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luisgarcialaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malialaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinlawoffices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcclellanlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdtlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medmalawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mifamilyappeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myattorneynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalconsumerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclglaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohfamilyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldtownattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pamelagwestesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandmlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perezlg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillipsballenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piersonelderlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbwemploylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosenblattesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rslaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanderslegalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego-estateplanninglawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegocafamilylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schildlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrustlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgmblaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapiroinjuryattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simermeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sladeneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soridlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speiserkrause.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonelawmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sverdlovlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallergallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgcwalaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkhmalaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trishgaddislaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trslawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trujillolawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaprobateattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpointlg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waypointplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wightlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maryannobrienattorney.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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