sanl.co.za

Issued by R10

About this certificate

This digital certificate with serial number 03:2b:91:7c:91:fb:ec:cf:12:01:47:4d:71:4e:55:d1:83:8e was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanl.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2b:91:7c:91:fb:ec:cf:12:01:47:4d:71:4e:55:d1:83:8e
Serial Number (int): 276162384437989315104555035628297157444494
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:db:76:b7:61:13:0e:ac:fa:20:37:41:66:c9:29:a8:ee:b5:10:a7
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 96:8a:95:20:c6:94:3e:17:54:20:1f:58:85:ef:5d:ff:49:9c:11:c4
Fingerprint (sha256): 5e:5a:09:8f:c6:e5:c8:6e:75:af:b2:67:f3:e4:20:cf:80:76:58:f8:74:e2:49:9c:a4:4d:e6:b0:5e:7b:18:47

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate sanl.co.za

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanl.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1-888-38-santa.com
abcstaffing.com
abolishabortionne.net
agencyforvip.com
ai.dexart.net
ameridocs.com
antiracistscore.com
anytimeschooling.com
aussiebattler.info
babe.baby
baby-comp.com
basiani.com
bettiesbench.com
bhilai.info
blaksalt.studio
blemicor.com
bloodsugarsciencelab.com
bookcookies.com
breakthroughmiracle.com
buildthetemple.com
canibuild.ai
canibuild.report
carlp.com
celestialbodies.com
chocolatecandyreimagined.com
churchofthegreatgod.us
churchofyah.org
coachkimsan.com
cobbwellnesscenter.com
cricketforum.in
czechgo.com
detarnow.com
disastermasterproducts.com
districtofcolumbiarealestate.com
diyinterlocking.com
doctorsletter.com
donleycounty.com
doorsexperience.com
einsiedeln.com
elementalgarden.com
fsquaredinvestments.com
gaiacanna.com
geomicrobiology.com
globalrfid.com
haagservices.com
hasyapi.com
howtogrouttile.com
hvacpalmbay.com
igadaba.net
ipv4auctions.info
kmj.co.in
lifeinacontainer.com.au
lowerburrellrealestate.com
matfunkbjj.com
mclarenpublishing.net
milfpussy.com
muaddib.xyz
naturalgasliquid.com
newyorkcityguns.net
nishita.in
olivoforillinois.com
optintextad.com
orlandomarketingcompany.com
pitools.org
playfit.us
pontonlaw.com
preceptscommentary.net
raipur.biz
rampanelli.com
readstown.com
rencontreadulte.net
rodsandrobots.org
sanantoniotreenursery.com
sanl.co.za
seafilesync.com
shortcutdomain.com
somd.properties
strengthexercise.com
studio8424.com
sugarcreeksupperclub.com
texassummercampdirectory.com
thomasphelps.com
throckmortoncounty.com
timjonesphotography.com
tornado.net
totalblogs.com
vpnprofiles.statenationals.us
washitacounty.com
welcomehomebaskets.com
winnebagofund.com
www.storycraft.bible
ypuganda.com

Other certificates including the domain name sanl.co.za

(limited to 100 certificates)
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
gemalings.ca
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za
sanl.co.za

Certificate

The complete raw certificate details for sanl.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTrA4TVkNq+QSXjs7sQb
NB4JoADxZAG2B78pgQ0nQh+CaI6xQkb8H+hPZvfRZfuXj4a3jR1eTOmaLc3oSk2W
lOpzk48NOEqRewoBP5VcLiQoxrO7DroaAhM00NMZ+6RzYKAcQxDfxSwaZMldibxQ
bsCs79Y3Slu/oWv0Ddg7PQj2XvVLB6ZYwAHM0eCbUVAmxYv7nNBH2Mc8HvtnGFcz
8nFftM3qb4L9kDXVeR1GE1JdQwsxigIh7e6WLk4sEVP8rBPAZqiUokvTjy5YMgfK
NjJ410jPCkFGX5xGXChjf5XB9Oj4Fy/ourscsY4oct4+ilc3DjQopJGoN66Mg9YU
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276162384437989315104555035628297157444494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 12:08:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 12:08:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanl.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22878105598166451120920020490546850265400241450753501914012580775447678544986887292637653742124329146974715994420264576675441145229611396842589045237270791652482343082853987706201289221158874072070208788421557385333092488731941188532751522730777531977108728416734433660944570768139652266195115296429193106572880262930331993091384188367377030663741613574814677339957363411753456615942510680106860189813162376527485954418830723206576536675698382327681238490621906164395787979555433705725557184317765514824395116119437469082199710289984486867407133449661531686303154759910833545388543916540871865929127020995596472685753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35db76b761130eacfa20374166c929a8eeb510a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-888-38-santa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abolishabortionne.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencyforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai.dexart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameridocs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiracistscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimeschooling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aussiebattler.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babe.baby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baby-comp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basiani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettiesbench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhilai.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaksalt.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blemicor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodsugarsciencelab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookcookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakthroughmiracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildthetemple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.report'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celestialbodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatecandyreimagined.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofthegreatgod.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churchofyah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachkimsan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobbwellnesscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketforum.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detarnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disastermasterproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'districtofcolumbiarealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyinterlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctorsletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donleycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorsexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einsiedeln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementalgarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsquaredinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaiacanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geomicrobiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalrfid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haagservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasyapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtogrouttile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacpalmbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igadaba.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipv4auctions.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinacontainer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowerburrellrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matfunkbjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclarenpublishing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milfpussy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muaddib.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalgasliquid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcityguns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nishita.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivoforillinois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optintextad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orlandomarketingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playfit.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontonlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preceptscommentary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raipur.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rampanelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readstown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontreadulte.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodsandrobots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniotreenursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanl.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafilesync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortcutdomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somd.properties'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strengthexercise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio8424.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarcreeksupperclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texassummercampdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomasphelps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throckmortoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timjonesphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tornado.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalblogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnprofiles.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washitacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomehomebaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnebagofund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storycraft.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypuganda.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019054a9e1b50000040300473045022100bb3f82365998fa1d28eb57fb20ab3c6b5ff772d7b15ed671f8035a143ae9f1f5022027162eb6ee9170c29575c8d6609cace23cf9bd0abf187272014c83bad03f2574007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000019054a9e27c000004030046304402200104ff37319b97f27803f9f93df1619c97c29a9453bfbe48a673d779c7537a120220053196f32d5d4f00e59c773309568fabed011db8a9a5b2ae7aa5184436162d71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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