cbdc.co.za

Issued by R10

About this certificate

This digital certificate with serial number 04:14:c3:50:98:21:9c:4c:12:ba:fe:d6:d2:e1:d3:24:3f:20 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cbdc.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:14:c3:50:98:21:9c:4c:12:ba:fe:d6:d2:e1:d3:24:3f:20
Serial Number (int): 355514408993975657983560717284096098975520
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 15:44:6c:65:2e:ab:d6:fa:f5:e0:34:91:33:c5:82:e6:86:e7:87:a5
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 4c:91:22:1b:3d:3d:00:b9:7f:cf:d1:86:dd:fd:03:4b:77:8e:38:22
Fingerprint (sha256): 51:44:a1:98:d0:44:19:02:b7:df:df:58:3b:c3:07:62:e5:cb:ff:63:76:64:86:6b:2f:68:e3:ba:2d:e3:c6:07

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate cbdc.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cbdc.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acadiaseaweed.com
accessmasters.com
advantagebasketballteam.com
aihenrik.com
allanblock.fr
baptism.istlm.com
bestincountry.com
bienesyraices.com
bigdaddyunlimitedtv.com
blockchainrory.com
blockchainsportscard.com
c12giving.org
cameronuselding.com
caricaturecreator.com
catholicyouth.bible
cbdc.co.za
chargersrealestate.com
charltoncounty.com
clamstake.com
conservativevideoproduction.com
davidsonrealtor.com
daytradefutures.com
dfwfoodphotography.com
domainspecialist.net
dustysantamaria.com
estetistar.com
etechtv.org
farmdawgs.com
gameadults.com
gardensofnewport.us
getsetcrefund.com
getviagra.org
gobine.com
gogreentennessee.com
googlesite.realbrilliance.net
h2bvisa.com
highlandpharms.com
hoghair.com
homeschooldsst.com
homescrew.com
hudsonnewton.com
internationalcourts.com
israelpaintsandhardware.com
joannbinford.com
kaneesha.in
kg5sll.org
klamath-falls.com
legalkitsoftware.com
lgbtqchannel.com
lioncasino.co.uk
liquidproductionsllc.us
macmanretro.net
mauritianparty.com
mrharris.buzzank.com
musiclayout.com
nanosizedproducts.com
naybzz.com
nocera.pro
notdrunk.com
oceanajones.com
omgurudev.com
onetimegiveaways.com
piankatank.com
pinnacleforum.us
poincianapressurewash.com
pornvidoes.com
prevaricator.com
probioticsreimagined.com
readmyword.com
reevesfarms.net
rencontresparis.com
satexashomes.com
saveaznow.com
sayerstewart.com
sell-my-motorcycle.net
shemale.forsale
shopjohnny.com
shoredreamsvacationrentals.net
showlivestream.com
smartestwallets.com
solongfb.com
southhillsunited.com
ssybridalboutique.com
sugarfuelsdietrelateddisease.com
survivaldispatch.tv
tabledividers.com
tollfreecommunications.com
topsoilorlando.com
totalenergysystem.com
trustford.com
unihealthcare.com
vpnprofiles.statenationals.us
watches4vip.com
webtrafficstatistics.com
webvamie.com
writeathon.com
www.canibuild.io
www.rxsugarstix.com
youngandylakey.com

Other certificates including the domain name cbdc.co.za

(limited to 100 certificates)
cbdc.co.za
cbdc.co.za
sni.cloudflaressl.com
cbdc.co.za
cbdc.co.za
trailerupholstery.ca
cbdc.co.za
sni.cloudflaressl.com
ssl-tlbto.epik.to
cbdc.co.za
cbdc.co.za
sni.cloudflaressl.com

Certificate

The complete raw certificate details for cbdc.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJkW3/PMzVX8bTQ7jX9j
BNUxs+pGUg9xqTeTbwrOn6S+JDhIWQ9cAMBLqKmw+nVrDVdrW1ydDmy27G8VNSYV
b+ImPvFNuE9tPFwe6Y7bhdWY7IfN3aANwFqKdlBFVN1GTsCfV9aMFHI7QDDC7lfC
oiN5cc7iOggO2B2jFFf7H03phUhmnMHW/52g74lNFYpfSJdefUmJqWWvnpvwMz2/
Wj/+ojx/G8O9Cb4/hfmEYzM1lWIabXlSokIwAeQfj2zMKkFxcb2NM8qjD8exjAGc
nrBDyInGefdd0UlsdQoYY4L6GI7We9+7JYMrx8MnweOCbRP8F1MAQGzCYP157sr8
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355514408993975657983560717284096098975520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 16:55:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 16:55:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cbdc.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22798386068308223604389240121390089165175976037501134768002609700239830234512718846237458881348992439457353456306881089209441824264397612518428010576853635803262462004376015798542661578468243287605402838260861836413275731708616229818738849874959600966366785775564322215468746425513673427479080360313534502566979784913557903369071276130740560026035935692303177355459363141748732522819014412080325271475283191057062260213687409893436485112127038592915419773747581929974053871950378954810816220760712163873030292328778873204536247063351562940152807244787280161518843735658135000778351961533935628939218023500009169419449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15446c652eabd6faf5e0349133c582e686e787a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1947 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acadiaseaweed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagebasketballteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aihenrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allanblock.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baptism.istlm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestincountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bienesyraices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdaddyunlimitedtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainrory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainsportscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c12giving.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronuselding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caricaturecreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicyouth.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbdc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chargersrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charltoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clamstake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservativevideoproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidsonrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daytradefutures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwfoodphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainspecialist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustysantamaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estetistar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etechtv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmdawgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameadults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardensofnewport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsetcrefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getviagra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogreentennessee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlesite.realbrilliance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2bvisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlandpharms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoghair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschooldsst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homescrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudsonnewton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalcourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'israelpaintsandhardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joannbinford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaneesha.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kg5sll.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klamath-falls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalkitsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lioncasino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidproductionsllc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macmanretro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauritianparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrharris.buzzank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musiclayout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanosizedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naybzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nocera.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notdrunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanajones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omgurudev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetimegiveaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piankatank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnacleforum.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poincianapressurewash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornvidoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevaricator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probioticsreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readmyword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reevesfarms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontresparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satexashomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveaznow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayerstewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sell-my-motorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemale.forsale'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopjohnny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoredreamsvacationrentals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showlivestream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartestwallets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solongfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southhillsunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssybridalboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarfuelsdietrelateddisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivaldispatch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabledividers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tollfreecommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsoilorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalenergysystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unihealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnprofiles.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watches4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtrafficstatistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvamie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writeathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canibuild.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rxsugarstix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngandylakey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff3d7742e0000040300483046022100e2c67cc7c654fe00d19460a99d82fa19c66e08680d0707f56d3757792bcf4750022100b7826d3dde7e316ae6ba2fe2f4cbcc9f7002fd82cb276cc622c0f89f71ffaee40075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff3d77c0200000403004630440220134ef964fa8cfba2230fe0a8f34e852c4d22b50287e8aebda33d4205881d574e022002b97a03dd47761031f10bfc21e20694cc35f51308eb164a25e2b1ff2003f4f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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