antiques.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:e3:ed:15:73:76:60:04:14:f2:83:2a:89:29:04:7e:22:b5 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=antiques.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e3:ed:15:73:76:60:04:14:f2:83:2a:89:29:04:7e:22:b5
Serial Number (int): 338896093501424568531508447224212955734709
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:b5:c7:5f:c4:37:63:8d:c5:78:29:73:e7:76:a2:05:4c:af:26:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:7a:f3:d0:71:04:88:5b:1a:7f:4d:0f:76:99:17:c6:5d:fc:54:e5
Fingerprint (sha256): 78:38:be:17:d3:75:20:77:f1:2d:3a:d7:c1:b0:9d:e6:86:bb:a4:7a:82:f5:9e:ca:2e:c4:ed:21:01:af:fd:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate antiques.co.za

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for antiques.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2123.com.au
*.2430.com.au
*.2675.au
*.2901.com.au
*.3371.com.au
*.3942.com.au
*.4408.com.au
*.4706.com.au
*.4712.com.au
*.4814.com.au
*.4873.com.au
*.5049.com.au
*.6164.com.au
*.6463.com.au
*.actuality-medical.com
*.airpoddies.com
*.alexgoose.com
*.ancientgreekonline.com
*.antiques.co.za
*.apx27.com
*.atneia.com
*.beermeatcigars.com
*.belmontbansko.com
*.brinkerbrown.com
*.condon.net.au
*.conqueror4x4usa.com
*.creative-hokkaido.com
*.dannybrito.com
*.dmxtour.com
*.eleanorewells.com
*.extremepics.de
*.happylittlekiwi.com
*.hatt.au
*.imtercom.com
*.jeni.ca
*.jusmodern.com
*.kampferenterprises.com
*.offense.com.au
*.raifeisenmarkt.de
*.scaac-nola.com
*.schminkbilder.de
*.senf.com.br
*.stubei.de
*.sustaining.org
*.teddybaeren-versand.de
*.ueberzucker.de
*.usd256.org
*.wettrt.de
*.xn--sexbungen-s9a.de
2123.com.au
2430.com.au
2675.au
2901.com.au
3371.com.au
3942.com.au
4408.com.au
4706.com.au
4712.com.au
4814.com.au
4873.com.au
5049.com.au
6164.com.au
6463.com.au
actuality-medical.com
airpoddies.com
alexgoose.com
ancientgreekonline.com
antiques.co.za
apx27.com
atneia.com
beermeatcigars.com
belmontbansko.com
brinkerbrown.com
condon.net.au
conqueror4x4usa.com
creative-hokkaido.com
dannybrito.com
dmxtour.com
eleanorewells.com
extremepics.de
happylittlekiwi.com
hatt.au
imtercom.com
jeni.ca
jusmodern.com
kampferenterprises.com
offense.com.au
raifeisenmarkt.de
scaac-nola.com
schminkbilder.de
senf.com.br
stubei.de
sustaining.org
teddybaeren-versand.de
ueberzucker.de
usd256.org
wettrt.de
xn--sexbungen-s9a.de

Other certificates including the domain name antiques.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for antiques.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338896093501424568531508447224212955734709
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 21:34:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 21:34:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'antiques.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664771005867315397784606062994665450804468907962191121020280327127604203190703084387536790022571418601914697652321932344689666412338776051634130835681635828774493813080533204971943771618526976408798441430846943694904962058006781335246052718250673725597449004750326488528673421147928578434362851741303541922676547063394010286620517626179173204280227576132281037349438233252241229750881518408660711139039643892423545395806270001960727493015987691368839977290963603405485922812931307826315684694303596420635658365889103138816019031920382147753684137533360940051715545474495909297006771430328576347568377028677969915288155907562540015499759211789488791285875515795150851370814928487145944146716959005144603725654728073591773304906654148479672776197178191632208690233158336730018256518392245269491108835647867673559600167635457836912301475626394885921440909465846335265156163154777897963985568096763999195660846901508273891384358505100891907197071742599316597295569343756977406439048164654409221187712642038251993505272026506317302445875018192367669861466126329925042844954088376512138299885122349565127935690107679569895604060362165899126973484677353345459638047430348944861812862001939138830662137207633185505981234219845340793149314999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7b5c75fc437638dc5782973e776a2054caf267f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2123.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2430.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2675.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2901.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3371.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3942.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4408.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4706.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4814.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4873.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5049.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6164.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6463.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actuality-medical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airpoddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexgoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancientgreekonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiques.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apx27.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atneia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beermeatcigars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belmontbansko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brinkerbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condon.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conqueror4x4usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creative-hokkaido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dannybrito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmxtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleanorewells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extremepics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happylittlekiwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hatt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imtercom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeni.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jusmodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kampferenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offense.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raifeisenmarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scaac-nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schminkbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stubei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustaining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teddybaeren-versand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ueberzucker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usd256.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wettrt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sexbungen-s9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2123.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2430.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2675.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2901.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3371.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3942.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4408.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4706.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4814.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4873.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5049.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6164.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6463.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actuality-medical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpoddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexgoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientgreekonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiques.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apx27.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atneia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beermeatcigars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belmontbansko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brinkerbrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condon.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conqueror4x4usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creative-hokkaido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dannybrito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmxtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleanorewells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremepics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happylittlekiwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hatt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imtercom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeni.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jusmodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kampferenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offense.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raifeisenmarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scaac-nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schminkbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senf.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stubei.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustaining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teddybaeren-versand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ueberzucker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd256.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wettrt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sexbungen-s9a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ed472b86b0000040300483046022100f67706c2a7289684d40e2215b1e61e8eefdb327dde5f57823073db0c7ca9cb6a022100ffb4e69d9ed02b491fc406bdcaebb111c3c278d3c44bc6099955d76d4c097ffd00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ed472b8cb000004030047304502210091bf2a57781f64835cf67f078d5990ed22010636997fce28f87adc168158547802201e953246a0c52e4ab5f692f2192e19de9260a95a6d61c22f0b3d5bc7b62bf679
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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