xsa.co.za

Issued by R10

About this certificate

This digital certificate with serial number 04:24:ff:aa:c3:b4:9f:15:5e:ea:ab:24:5b:02:c9:83:a3:51 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xsa.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:24:ff:aa:c3:b4:9f:15:5e:ea:ab:24:5b:02:c9:83:a3:51
Serial Number (int): 361039148734966051656342843656855441613649
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:d0:b8:97:9d:91:a5:ee:17:44:80:d7:71:d6:e3:d0:02:53:fc:ac
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): f5:0a:4f:94:75:db:25:1a:92:4d:a3:c5:95:36:63:c9:9e:dc:f4:58
Fingerprint (sha256): 3c:54:f8:7a:b3:ec:e2:73:74:a9:4e:9b:49:8c:13:0b:f9:35:02:ad:3c:b5:c7:c1:f1:67:8c:cd:32:be:30:97

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate xsa.co.za

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xsa.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adaurb.com
adfgcm.com
adrianmarquisio.com
arbitrageblackbook.com
attorneyreferrals.com
banpronoun.com
buysellconcerttickets.com
buysellecurrency.com
buysellrarecollectibles.com
cassrolloff.com
checkyoutuberank.com
christmaslite.com
conservativepolicysolutions.com
creditcardapplynow.com
criminal-justice.com
cueting.com
destroythefederalreserve.com
dfwwomen.com
distriauto.com
dowagiacrecycling.com
downtownsantaana.com
edumptruck.com
endangerpoaching.com
energy-smart-home-pros.com
eropharmacy.com
evangelicaltraining.com
flappy-pegasus.com
fortunbar.com
fuckmother.com
ga.cosfacts.org
gateandfences.com
gayeroticaudio.com
georgiabulldawg.com
gifts.lisaandfrank.com
gokartads.com
guntrywva.com
healthybuyersclub.com
heatherbondra.com
hempgi.com
heropnw.com
holothing.com
homescrew.com
houstontxdemolitioncompany.com
ibhurt.com
inn94.com
jedrzej.com
katalysttrainingsystems.com
leaselock.co.uk
lunch.meetingwithric.com
magnalocos.com
masterresalerightsonline.com
merchantaccountsystems.com
metahockeyplayer.com
methanizer.com
modalcondo.com
mrb-art.com
mutuaintegrativa.com
namingconsult.com
naplesresorts.com
nftgie.com
noconeighbor.org
overcomersprogram.com
paintersinnashville.com
parcel.tube
parcel2go.co.za
pinevillerealtor.com
psychich.com
pwcforsale.com
riminibeach.com
rltfunding.com
rozave.com
rxmaxsnax.com
screamerfanbase.com
sexuli.com
showconnection.com
stockphots.com
sudhira.com
summitviewhowe.org
theberean.com
thesoftwaredepartment.com
theurbanathlete.com
tonguemuzzle.com
totalsmallbusiness.com
ugliestchristmaslights.com
ustaxforms.com
vert-tige.com
viccherikoff.com
villaportfolio.com
vmalaw.com
waterburybankruptcyattorney.com
weareanti-social.com
weegendumpster.com
www.alluloseorganic.com
www.cyberpatentattorney.com
www.sweeneyaerospace.com
xsa.co.za
yourchurchsolutions.com
yourgirlfridaylv.com

Other certificates including the domain name xsa.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for xsa.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdvOmVgI3rwdkIcN1Oya
dUYo5JU16RKk36BrfoUu+x8gaS/s3gsyEfI3clUf4uBIrlUQQC9WEzVF64moQWRn
MFrSDxFjf6oK12zWfuTant82x3SUCCy60DzTLwUAekSQQwvSmi7I+FsW05N/PH0E
3imHL8OSl5KdgWQWUdlu1bl/YWGFnfiXirIvRNxNhKIN6OdWQ8vWSJpVhu86yjHV
GxfCQnhFqK984A2xQpFdl5fgkiI3uJPuA7bBA1jRgI5a1jDiJuiM/AUuL6YIMIkq
9F4NO3ZrD7mI99EfpInoevcBReZyogV4u+xQnIPsKvnMpuictWpzTvJimnsKH15q
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361039148734966051656342843656855441613649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 05:41:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 05:41:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xsa.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24472383743415260379520660664302054711334474695708832817687737847481383867202121987581417578541972776669011368868301843437890915309662778467848298808669126366905736348553721365952912498159761813475225042600041003054600543828836028476115734283213508163193909922463273543229290605057998774967613171665292765698419779145469258231300493319394253781459192358830697762070164076254134489344099704113357531127536827836172980165542997801206873274492503015243373218874397458300641180037800697929262415446459092110227018118628489094464970335684989107438990650587468202906168632659219200133079897727114914407034898051801892678187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40d0b8979d91a5ee174480d771d6e3d00253fcac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1922 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adaurb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfgcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrianmarquisio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageblackbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneyreferrals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banpronoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellconcerttickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellecurrency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellrarecollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkyoutuberank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservativepolicysolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapplynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminal-justice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cueting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destroythefederalreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwwomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distriauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dowagiacrecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtownsantaana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edumptruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endangerpoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energy-smart-home-pros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eropharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evangelicaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flappy-pegasus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortunbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckmother.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateandfences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayeroticaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgiabulldawg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifts.lisaandfrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokartads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guntrywva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthybuyersclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatherbondra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heropnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homescrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontxdemolitioncompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibhurt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inn94.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedrzej.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalysttrainingsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaselock.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunch.meetingwithric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnalocos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterresalerightsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchantaccountsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metahockeyplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methanizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modalcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrb-art.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutuaintegrativa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namingconsult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naplesresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nftgie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noconeighbor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcomersprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintersinnashville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcel.tube'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcel2go.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinevillerealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwcforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riminibeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rltfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxmaxsnax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screamerfanbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexuli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockphots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudhira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitviewhowe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theberean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesoftwaredepartment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theurbanathlete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonguemuzzle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalsmallbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugliestchristmaslights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustaxforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vert-tige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viccherikoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villaportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmalaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterburybankruptcyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weareanti-social.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weegendumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alluloseorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyberpatentattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sweeneyaerospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourchurchsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourgirlfridaylv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019053478d5f0000040300473045022100a94cc47e205dc65fa563b6fe92c9578d7f2da6d8b3d8b6b550f6363f53ba5be202204aa59ac5ce714c797998479cd9eda3ec2253a9572e1697c9216c2c30225c598500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019053478d9b000004030047304502203de460bad450b337adc752adef7aa3a94660539e9fc77ae5ea90a337d2b4654e022100f863502cd0d40083bc2bbf7fa99dad3dabc59d4ae70dabf8dbe194c986121ea6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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