qdd.co.za

Issued by R11

About this certificate

This digital certificate with serial number 04:b7:a7:1f:04:68:05:73:d8:15:43:02:b7:4e:fd:a8:09:91 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=qdd.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b7:a7:1f:04:68:05:73:d8:15:43:02:b7:4e:fd:a8:09:91
Serial Number (int): 410942958999442475718756477156505198004625
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2c:54:fa:31:91:bd:1f:e7:99:6e:95:e4:fe:ad:57:2f:af:3b:b7:78
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): eb:a6:67:bc:cc:6d:a2:23:69:6c:f2:b6:8e:41:7a:19:a4:c8:4c:a2
Fingerprint (sha256): 2e:e4:52:ab:64:72:ae:7b:9a:00:f4:0e:6f:e7:a9:8b:89:32:73:f0:14:bc:ad:4d:c3:e0:d5:cc:1e:24:b7:b0

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate qdd.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qdd.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

49ers.love
a2zlgbtq.com
advantageemb.com
alabamacourt.com
alternativeinvestmentassets.com
alysonprior.com
applyformajorcreditcard.com
arbitrageceo.com
austinprivateschoolreviews.com
banpridemonth.com
bengalurudental.in
besthealthcareplansforsmallbusinesses.com
bitterbrook.com
borgetto.com
botarbitrage.com
careertalk.in
chhattisgarhmatrimony.in
christianschoolday.com
collazoforillinois.com
compressedairenergy.com
connaughtplacedelhi.in
contacto.gratis
crisisfinancialanalysts.com
duersata.com
enerpactoolgroup.fi
flalitigators.com
flippa.tuscaloosaproperties.com
freedomhealthdirectory.com
ftmyersestateplanning.com
gayceo.com
gilads.com
hardenedhomestead.com
harshi.in
homeschoolparentingsummit.org
hsaadi.com
intlcenter.com
joesmeatandseafood.com
kingsburycounty.com
kissimmee.net
legaltopics.com
livingguides.com
lonokecounty.com
luxebourg.com
madeyoublush.com
manhourpower.com
melenadelsur.com
milfpussy.com
mywellness.in
noattorneyrequired.com
norwoodyoungamerica.com
novotag.co
ony.co.in
ourmissionlaons.com
paintandshoot.com
patsies.com
pc-repairs.com
pennsylvaniacourt.com
poisonivyremovaldirectory.com
polandhockey.com
posgov.com
pranaam.in
qdd.co.za
quloyalty.com
resetresistance.net
rogersagency.com
romulus-consulting.com
rxcerealpoweredbyrxsugar.com
rxsugarstix.com
saintnicksspirits.com
sanantoniolawyers.co
sanaugustinecounty.com
sandiegodivorcesolutions.com
sapersonaltrainers.com
scottpage.net
scottsdalearizonarealestate.com
seaweedexchange.org
seniorstoflorida.com
septicsand.com
sequoyahcounty.com
sespdr.shop
shampoobic.com
shippingcontainershomesaustralia.com
skagwayborough.com
skinrash.com
soiloutlet.com
southeasteconomics.com
stlnetworking.com
sunkissedvillas.com
tankcares.com
targetshopping.com
thecontingencyplan.com
valleybearcabin.com
washingtonmobilebillboard.com
wencam.com
wilderstrings.com
xn--3-1ga.at
yankeecraft.com
youngadultmalerehab.com
zingadvertizing.com

Other certificates including the domain name qdd.co.za

(limited to 100 certificates)
qdd.co.za
qdd.co.za
qdd.co.za
nfttheocracy.com.qdd.co.za
qdd.co.za
qdd.co.za
qdd.co.za
qdd.co.za

Certificate

The complete raw certificate details for qdd.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLUuiZjYZ/ADAHrYwA/s
PgJzYAMlyLjrU1HcuBKCzevLZ44n+zGVwksp0ieCzEvw2tWyJtfDM/8yy+PYuBbR
msGRWGLu0co3jfb6eIE/la1MQPARZPOf2BdZ86DdHw5BRoQFV2Ijot302lNy+knC
6taEfjMsdNMmQtBEgV3XqtlShHO7KStWEW9lxdilusoSVbXuuKOcH71VtBEb6zsD
O6elNk2gUXCLkvbVDxzsJ+1j5vQiUEn2QIdq3od2FnHHgrej4Uqt3tyCIVqQqXnw
lAWomYD87ciVcZZL+jGAg4glewE16EEkAOYdhmi+u5yPWArmV4LJMusjmgiRfK+T
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410942958999442475718756477156505198004625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 06:11:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 06:11:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qdd.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22812238962991061399319034790570438553574339987572307231533400334970271068729212164762711359567783367075455615706254431659934935663381570484190024202129001634005032610252423736130362812840966512697401308978918706692121275607788572236178877990994168434161600721104837163805148877737210205418205905074754865149797610077485722736714563780166222428394258372739415973879169424290837455459415277160060797412335080264654213562116817100407282804217817191347018324767223452056891827679893637430365524893786171433457296843785752259933337367165870760876760197578544022854818320660553442488440049908962040017939517236867368981467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c54fa3191bd1fe7996e95e4fead572faf3bb778
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '49ers.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2zlgbtq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageemb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamacourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativeinvestmentassets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alysonprior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applyformajorcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinprivateschoolreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banpridemonth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengalurudental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besthealthcareplansforsmallbusinesses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitterbrook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careertalk.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chhattisgarhmatrimony.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianschoolday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collazoforillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compressedairenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connaughtplacedelhi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacto.gratis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisisfinancialanalysts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duersata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgroup.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flalitigators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flippa.tuscaloosaproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomhealthdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftmyersestateplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayceo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardenedhomestead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harshi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolparentingsummit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsaadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intlcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joesmeatandseafood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsburycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissimmee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaltopics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingguides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonokecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxebourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeyoublush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhourpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melenadelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfpussy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywellness.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noattorneyrequired.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwoodyoungamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novotag.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ony.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourmissionlaons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintandshoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patsies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc-repairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennsylvaniacourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyremovaldirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polandhockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posgov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pranaam.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdd.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quloyalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resetresistance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogersagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romulus-consulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxcerealpoweredbyrxsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarstix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintnicksspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniolawyers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanaugustinecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegodivorcesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapersonaltrainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottpage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottsdalearizonarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seaweedexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorstoflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septicsand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequoyahcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sespdr.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shampoobic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingcontainershomesaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skagwayborough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinrash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soiloutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeasteconomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlnetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunkissedvillas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankcares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targetshopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecontingencyplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleybearcabin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonmobilebillboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wencam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilderstrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--3-1ga.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yankeecraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngadultmalerehab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zingadvertizing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff18a3ba80000040300473045022100a8c70eda0ecd6a23759bcf0fe6f5eb10a6a1ae6db5ecdc93f58e3a6694fc1e7102200e63625500d8381ae577786870c59a5127ca5d152eb15e02d4256307420cdd8e00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff18a3c9e000004030046304402202ade9e93ffe1b5447ad4f3b3036d252c1f1f1129ed40d7ef67cafba5c31adc1302201111c9bc754f9e62a2080c00fc13d4585a8e0e86704ec2a3950a0c0a2863042b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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