safarbank.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a3:3f:27:47:e5:68:d2:2e:7d:c1:8f:d8:a6:81:ed:6e:a8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=safarbank.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a3:3f:27:47:e5:68:d2:2e:7d:c1:8f:d8:a6:81:ed:6e:a8
Serial Number (int): 316886828924932413652699533247579197107880
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:4a:f8:61:59:31:19:fd:22:dc:09:44:c7:41:0d:62:29:28:61:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:df:22:7f:79:f3:81:c5:c2:97:b3:4c:e7:da:1f:8d:69:e5:c5:eb
Fingerprint (sha256): 43:68:60:ef:69:4c:dd:71:e6:dc:bf:da:60:92:2f:ff:35:c8:c3:01:88:f5:51:8a:cd:11:76:ae:36:4b:93:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate safarbank.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safarbank.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aichaafricanhairbraiding.com
*.airfarewarchdog.com
*.aviation-francaise.com
*.bachlaufset.de
*.bdpayflexdirect.com
*.benihaha.com
*.boomerangarms.com
*.campuseducadium.com
*.careerinfoods.com
*.cinemapop.com
*.dqfanfeed.com
*.drconfort.com
*.ealmsrt.com
*.easypeasyhighschool.com
*.eltonsmensstore.com
*.freelocalhookups.com
*.frubhub.com
*.hanesone.com
*.iimmgg.com
*.ipsamarillo.com
*.iranmotors.com
*.ishidajapan.com
*.martinmetallic.com
*.mcia-nj.com
*.muleville.com
*.myieltsessentials.com
*.mypaceportal.com
*.njsurchage.com
*.notdstorm.com
*.nypopst.com
*.orangecountycreditunion.com
*.oreillyfirstcall.com
*.prepaenlineasep.com
*.primericaoline.com
*.ps3trophycard.com
*.safarbank.com
*.shuttlecraft.com
*.swarovsk.com
*.telburgerking.com
*.tommyjons.com
*.triparvisor.com
*.tropicaltibits.com
*.verpornocomics.com
*.vivha.com
*.vteximg.com
*.wellfargocenterphilly.com
*.willingability.com
*.wwwbberror.com
*.wwwcitizensfla.com
*.xbeauties.com
aichaafricanhairbraiding.com
airfarewarchdog.com
aviation-francaise.com
bachlaufset.de
bdpayflexdirect.com
benihaha.com
boomerangarms.com
campuseducadium.com
careerinfoods.com
cinemapop.com
dqfanfeed.com
drconfort.com
ealmsrt.com
easypeasyhighschool.com
eltonsmensstore.com
freelocalhookups.com
frubhub.com
hanesone.com
iimmgg.com
ipsamarillo.com
iranmotors.com
ishidajapan.com
martinmetallic.com
mcia-nj.com
muleville.com
myieltsessentials.com
mypaceportal.com
njsurchage.com
notdstorm.com
nypopst.com
orangecountycreditunion.com
oreillyfirstcall.com
prepaenlineasep.com
primericaoline.com
ps3trophycard.com
safarbank.com
shuttlecraft.com
swarovsk.com
telburgerking.com
tommyjons.com
triparvisor.com
tropicaltibits.com
verpornocomics.com
vivha.com
vteximg.com
wellfargocenterphilly.com
willingability.com
wwwbberror.com
wwwcitizensfla.com
xbeauties.com

Other certificates including the domain name safarbank.com

(limited to 100 certificates)
safarbank.com
safarbank.com
safarbank.com
safarbank.com
safarbank.com

Certificate

The complete raw certificate details for safarbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316886828924932413652699533247579197107880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 12:51:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 12:51:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safarbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773894411696445527543062970653302308535982623649830564066173625279297775773905761985568879256981200350888236966321307834642984356673748298558136769033091144687352298431375407093074600526348890575823080742857741479703807773660207271663581448210003788990970034988591675136825843833920854744993001512447935900999923390195153594416407080060689603503612974699854270328191033389463029815571268122566579252012422485670968933977192980190295001996111897696570343508708046781488131448934592692826111726861076339108805438597635020700371782051326775475728164175771474923873692911071352734905468652109175082157906856312930144153100792247557642125124046443303486046104072677849639384378417238450722035028805127166342064308362490559478591217165286336747365678751634287139613458137462429684515938574014506287865436239379275765947301069231727042229166846895692918799815803773861275379978235493668830199109639411572304000300940452791891657773222907163300459963597633533785506684523996634555995138914427629748374146089472407945945932880188212589865715789994644524670855897193358697059312724671324138171572730484799102697708973205794966647495533037054752579941244307358988612997222439262259241313986266588600137468199106288355702717550955277999770416697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd4af861593119fd22dc0944c7410d62292861fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aichaafricanhairbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfarewarchdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviation-francaise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bachlaufset.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdpayflexdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benihaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boomerangarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campuseducadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careerinfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemapop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dqfanfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ealmsrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easypeasyhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eltonsmensstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelocalhookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frubhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanesone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iimmgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipsamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iranmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishidajapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martinmetallic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcia-nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myieltsessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypaceportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njsurchage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notdstorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nypopst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orangecountycreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oreillyfirstcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaenlineasep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primericaoline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ps3trophycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuttlecraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swarovsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telburgerking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tommyjons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triparvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tropicaltibits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verpornocomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vteximg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellfargocenterphilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willingability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbberror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcitizensfla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xbeauties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aichaafricanhairbraiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airfarewarchdog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviation-francaise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachlaufset.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdpayflexdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benihaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomerangarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuseducadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerinfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemapop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dqfanfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drconfort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ealmsrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easypeasyhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eltonsmensstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelocalhookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frubhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanesone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iimmgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsamarillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iranmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishidajapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinmetallic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcia-nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muleville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myieltsessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypaceportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njsurchage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notdstorm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nypopst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orangecountycreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreillyfirstcall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaenlineasep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primericaoline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps3trophycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safarbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuttlecraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swarovsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telburgerking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tommyjons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triparvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropicaltibits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verpornocomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vteximg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellfargocenterphilly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willingability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbberror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcitizensfla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbeauties.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f4e2ce68a00000403004630440220161f73dcfc9ce117102afe5a6b21253fb2014ea7cf2f6df887f70a35c20fe1440220591ade841be44d1b318665393644e48bd2151dcfac4b64d602956a7c600b16e000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f4e2ce6d3000004030047304502203ca136af0745bf1c155642e446451665842153083c2e776252d5b825a5daab2902210088cfe7c98ac790487421082c2a57a6ce6567d19aec5124200a9d8fd4d8fe5301
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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