opteken.delareybrandewyn.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:44:89:f9:f8:2c:a2:32:34:71:e0:91:4d:ec:e0:50:40:f1 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=opteken.delareybrandewyn.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:44:89:f9:f8:2c:a2:32:34:71:e0:91:4d:ec:e0:50:40:f1
Serial Number (int): 284659460896818682223836153089595630698737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:ed:09:6b:c0:4f:16:ba:e4:f7:48:b1:99:57:e2:4c:d0:ec:c0:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:f8:a4:d4:c2:e6:bd:8a:e9:bc:7a:cb:f3:11:a7:92:0b:c8:80:f8
Fingerprint (sha256): 64:06:c0:61:75:8e:a5:ce:b6:ce:85:71:8e:8d:bd:cc:f6:93:26:05:21:67:77:d9:b2:e4:d4:aa:b9:82:1c:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate opteken.delareybrandewyn.co.za

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opteken.delareybrandewyn.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admission.usmeigao.com
contacts.cosmedica.com
feedback.uniapply.com
form.afh.deals
form.arvo.com.sa
form.freewebinars.in
forms.2ndfamily.com
forms.arctai.com
forms.banneruniform.com
forms.belong.life
forms.blink.jo
forms.boostaerospace.com
forms.brightsentinel.com
forms.capautobrokers.com
forms.clanity.com
forms.clipstocktalent.com
forms.collingwoodlawoffice.com
forms.deliverthat.com
forms.divorcethesmartway.ca
forms.dma.company
forms.dynamic.re
forms.educircles.org
forms.eightandahalf.com.hk
forms.elzinc-america.com
forms.foodandbeverageontario.ca
forms.forefront.ltd
forms.fovea.support
forms.gate-in.com.ar
forms.gatehousegrapevine.com
forms.gecmediagroup.com
forms.genmediation.com
forms.goglobalgeo.com
forms.groupe3737.com
forms.gutteritup.com
forms.indianink.co.nz
forms.kendallcliffs.com
forms.kimblelabs.com
forms.kleenwayservices.com
forms.latitudepay.com
forms.lens-energie.nl
forms.lhcc.org.nz
forms.lmp360media.com
forms.logicalpros.com
forms.marchaine.com
forms.miafoodservice.com
forms.misswish.tcmtherapy.com.sg
forms.modbrand.ai
forms.myelement.co.uk
forms.national360.com.au
forms.neuroagilityprofile.com
forms.niathewoodlands.com
forms.onerequest.com
forms.optonpo.com
forms.oriongroup.ae
forms.panellis.com
forms.phdelicorp.com
forms.pinnacleprotect.com
forms.pioneeroncamera.com
forms.platinumyoga.com
forms.predatorcycling.com
forms.raoftexas.com
forms.resumehounds.com
forms.retama.co.il
forms.romer.co.ke
forms.smartnersbusiness.com
forms.solutionsplomberie.com
forms.sosautocraft.com
forms.spectrum360s.com
forms.spirertech.com
forms.springstax.com
forms.synapsun.com
forms.theenrichery.com
forms.tifatravels.com
forms.uniskill.com.ua
forms.unitedchemical.com
forms.viaanix.com
forms.vivewell.health
forms.wsi-llc.com
formulaires.concessionnaireconforme.com
formulaires.pretautofinance.com
formularios.evolucioni3.com
glenross.coach
gueston.marchainelive.com
leadtest.electrocom.com.au
map.rwazi.com
opteken.delareybrandewyn.co.za
rsvp.americafromhome.com
servicios.altapietra.com
tenants.landlordsa.co.za
tradeshow.electrocom.com.au

Other certificates including the domain name delareybrandewyn.co.za

(limited to 100 certificates)
forms.romer.co.ke
forms.romer.co.ke
forms.romer.co.ke
opteken.delareybrandewyn.co.za
opteken.delareybrandewyn.co.za
forms.romer.co.ke

Certificate

The complete raw certificate details for opteken.delareybrandewyn.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pWOsNAYkgGR+YytlSfr
XCoqCghxpDyxkKvwlnb+G9AOvVQvHL2Saba4d1RVvyp8yM6b0e3FW3TOwESxPufe
cVmhEK9rvHMR84BTAeMGIjqwzXyotpMTfdWKmArhsekmJcjcWxoVx7WM//VPIL3w
UuanJLhxWY8Ud5jd6TID9N+YsW95q1869DAe0gTwsXB12SbSO8YmdkI/8QMxSvdl
xnYBklzyfs6x8Fyw21EiR2gUAgDxSai6vH0KbQC6kYMZXoNUL1ehgCqYUaQ0bkEW
pF5DK3tRBdoru4Xq9HPq2wwRpoxuxTuFWLip3rrNiMAECa245pa7FuOl7TvFULe6
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284659460896818682223836153089595630698737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 11:21:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 11:21:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opteken.delareybrandewyn.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30623419297233097357213141585946416614669727439634092547205537816058588269717745366003904849082771668089423320432658800843534511301293423623068535901972982527931714888606101956495873811389209822456442339707826138691622913674502061891633328486960845902154416180200421813839283166116998037778073011553597673737606520905222063565858196718867431144788869255249237099592999302300741863778595417950990454218012009842262193196275094572587937700085140970585876254453938243059482149991452145510241930817248232006000541540471374902098119701304501250687347637111231682486746499158018086976696058768290976637747270698355280820767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55ed096bc04f16bae4f748b19957e24cd0ecc087
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admission.usmeigao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.cosmedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.uniapply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.afh.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.arvo.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'form.freewebinars.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.2ndfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.arctai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.banneruniform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.belong.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.blink.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.boostaerospace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.brightsentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.capautobrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.clanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.clipstocktalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.collingwoodlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.deliverthat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.divorcethesmartway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.dma.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.dynamic.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.educircles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.eightandahalf.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.elzinc-america.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.foodandbeverageontario.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.forefront.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.fovea.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gate-in.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gatehousegrapevine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gecmediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.genmediation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.goglobalgeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.groupe3737.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.gutteritup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.indianink.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.kendallcliffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.kimblelabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.kleenwayservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.latitudepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.lens-energie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.lhcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.lmp360media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.logicalpros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.marchaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.miafoodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.misswish.tcmtherapy.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.modbrand.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.myelement.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.national360.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.neuroagilityprofile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.niathewoodlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.onerequest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.optonpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.oriongroup.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.panellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.phdelicorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.pinnacleprotect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.pioneeroncamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.platinumyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.predatorcycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.raoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.resumehounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.retama.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.romer.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.smartnersbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.solutionsplomberie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.sosautocraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.spectrum360s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.spirertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.springstax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.synapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.theenrichery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.tifatravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.uniskill.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.unitedchemical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.viaanix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.vivewell.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.wsi-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulaires.concessionnaireconforme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulaires.pretautofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formularios.evolucioni3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenross.coach'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gueston.marchainelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadtest.electrocom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.rwazi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opteken.delareybrandewyn.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsvp.americafromhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicios.altapietra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenants.landlordsa.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeshow.electrocom.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c4439c3180000040300483046022100850ac3a68d18443930b4363a72010112af5cb56d096b315f27252159239ab802022100a76ab4918f95cb3091589cb35deb73372cb7f84865edc8ea146ccea2efa32e7e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c4439c36e0000040300473045022100fe183dda43863d47d2cd4e29644a78adce8c467e7c84e9a62d8894a5eb2471c1022036f558ca21bdde03e536a83a4f91a6aa048c8f4dbdfc8840bef66c5222c007e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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