ufx.co.za

Issued by R10

About this certificate

This digital certificate with serial number 03:67:2f:d0:b7:ba:f4:4d:54:73:98:11:af:a5:fe:da:2e:80 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ufx.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:67:2f:d0:b7:ba:f4:4d:54:73:98:11:af:a5:fe:da:2e:80
Serial Number (int): 296449499028178871491176987108123870899840
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:2e:0e:63:34:1a:e7:52:f9:bf:e2:c5:e0:f4:22:f0:e2:6d:ce:cd
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): b6:2b:46:67:d0:4e:15:1e:92:b6:b9:94:58:83:0c:44:a1:ca:eb:52
Fingerprint (sha256): 20:ef:10:31:5c:f5:da:63:0b:93:e8:7e:8d:4e:32:57:4c:84:8c:e6:d1:84:2f:f1:35:17:98:97:10:35:56:39

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate ufx.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ufx.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adacia.com
adultads.co.uk
agencyforvip.com
aideclan.com
aircarport.com
allisonartexpressions.com
americancourts.com
americansunifiedforfreedom.com
anytimeschooling.org
arbitragehacker.com
arbitrageservices.co.uk
arcadedrifter.com
aspectium.stream
basedelections.org
bestcollectiblesonline.com
bhccontracting.com
bigrigloan.com
black-widow.com
candybarsreimagined.com
cannabiskinetics.com
carbonoffsetarbitrage.com
chrisburns55.com
connecticutcourts.com
cortlandfibronbx.com
ctjlaw.com
cufflinksavenue.com
dallasfortworthlawyers.com
dcannabis.com
edmondheatandair.com
elkhartrolloff.com
faithunfazed.com
federalelection2025.com
frankville.com
freeguns4kids.com
galvestonoffshorecharters.com
gaybookstores.com
gobuffalos.com
goodvenisonsausage.com
headinjuryattorneys.com
hempbranding.com
hemprv.com
homeandcommercialcontracting.com
humancatastrophe.com
ignitethewealth.com
insta.bible
integritymedicareoptions.com
inventorjack.com
iremaltug.com
iwanttogetorganized.com
keleherlaw.com
landscapingdublin.com
legitsuccess.com
lgbtqassociations.com
magnaloco.com
meanshub.org
mechaniconthego.com
nexttoolbox.com
oxnardlandscaping.com
partybkk.com
passiom.com
pearlpokerpalace.com
petaconas.com
picklelaunch.com
polkville.com
powerbiltgolf.com
presenthillgrain.com
principleofgoodness.com
prowebhostingservices.com
pushrank.com
realgreatsugar.com
reesemilford.com
reginaangelorumpressllc.com
rxsugarfiber.com
rxsugarvitamins.com
saintlandryparish.com
salvagepwcauctions.com
showexchange.com
sixofaces.com
southbendrolloff.com
ssyboutique.org
stevemccranie.com
stronginspire.com
sucktrash.com
summitparkbiblechurch.org
survival.bible
swealthyice.com
syrupreimagined.com
thebarewenchproject.com
ufx.co.za
unsugaryourmind.com
victoriacouncilelections2024.com
vintageatvparts.com
volinia.com
washingtonstatepropertysearch.com
westierescueflorida.org
weteachtreasure.com
willtat4btc.com
www.checkmyblock.org
wwwcoming.com

Other certificates including the domain name ufx.co.za

(limited to 100 certificates)
ufx.co.za
ufx.co.za
stemdenver.org.ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
filetminion.com.mnmeetings.statenationals.us.ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za
ufx.co.za

Certificate

The complete raw certificate details for ufx.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c6bXmbQ0shjx2e4ljYb
bownSJnTgmGXkl1++wQ9AX0pUohlp7bB8BGt/ncwVT+Ty66sLET2s7cqz+RUyqjh
RBIg6dOzRE9dk3KWg+fYwsz8sUb7f+HmylsxPZxRasjl80Cqp5ddKxQGsrXit1rS
miQOnJ7MjLZZ0zJEqBFwD21dgb3JYILkOmZwVI8HdVNv86irVRQKRVctfjbeV9FQ
Z28PGsh2+fWmUdRuSQnp+RFbqi3t/ndm23/glI2bOA01G2XCUUhM/igmEUNRV4fB
BpjMYCSUuJ9IpyHBMRdKe1m6tuAHYemR2V0Y0uJog/dOHDj+iNZ8PffFTWKSTThq
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296449499028178871491176987108123870899840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 06:49:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 06:49:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ufx.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26990640621880830990425879591110508298582506889427407493066775010004778848633267302535909990567162377669230335279590609039135490392019730853078402609778737525265526810623002066604710471546515526678053894958174331190986735989829495675317952465848129288003780190880282596366840070566002255666087409818607180263646729941378416375528019782403728761426151404068782866349823209720144747623295859047082271744503985937623174389970461661726973045291001359511037726281276059327219161913411855782855433258993054309530780922954534969734047698954095883056036068509058346248499260412608805127405934790338173687259080658669350185561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							362e0e63341ae752f9bfe2c5e0f422f0e26dcecd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adacia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencyforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aideclan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircarport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allisonartexpressions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americancourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americansunifiedforfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimeschooling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragehacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadedrifter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.stream'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basedelections.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcollectiblesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhccontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrigloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'black-widow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candybarsreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabiskinetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonoffsetarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisburns55.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connecticutcourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortlandfibronbx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctjlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cufflinksavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasfortworthlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmondheatandair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithunfazed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federalelection2025.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeguns4kids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galvestonoffshorecharters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaybookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobuffalos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodvenisonsausage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headinjuryattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempbranding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemprv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandcommercialcontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humancatastrophe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitethewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insta.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integritymedicareoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inventorjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iremaltug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwanttogetorganized.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keleherlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landscapingdublin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legitsuccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqassociations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnaloco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanshub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechaniconthego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexttoolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxnardlandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partybkk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlpokerpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petaconas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picklelaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polkville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbiltgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presenthillgrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'principleofgoodness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowebhostingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realgreatsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reesemilford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reginaangelorumpressllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarfiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlandryparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvagepwcauctions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixofaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbendrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssyboutique.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevemccranie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stronginspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucktrash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitparkbiblechurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survival.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swealthyice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syrupreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebarewenchproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufx.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsugaryourmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriacouncilelections2024.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintageatvparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volinia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonstatepropertysearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westierescueflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weteachtreasure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willtat4btc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.checkmyblock.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcoming.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff1ac2d1d000004030047304502201df7875bed71f0e2ad2a89d491eb1baa325cffd24dbbe091a3d72bdd08180e04022100c2818c2ec69bc99cddf642b550e3798922a9f8596fd165d073e43f7c5ab40306007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ff1ac2ddb0000040300483046022100a2106791a889bccee6b32894ee4ccec880732a62134a3b67124867aa07a3f318022100e35b27f1f46753576a519677372685231e0b5dd1f3aa66189abdbe4120a70eed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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