sanm.co.za

Issued by R11

About this certificate

This digital certificate with serial number 04:eb:0b:6d:a2:f4:af:e0:d5:26:68:9d:75:84:4f:aa:95:12 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanm.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:eb:0b:6d:a2:f4:af:e0:d5:26:68:9d:75:84:4f:aa:95:12
Serial Number (int): 428430690726909198998928094011198364357906
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:2f:9e:ea:6f:05:66:91:c6:db:60:9d:d6:f9:c8:63:96:25:81:c6
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): c2:05:24:5a:07:5e:3c:59:aa:72:f0:cc:46:37:4d:c5:eb:ce:24:f2
Fingerprint (sha256): 79:c5:be:21:28:d3:be:6a:50:91:ba:fa:0a:99:73:af:de:3c:e1:c9:1e:c2:f9:c6:ad:87:a6:45:5e:d6:8b:fb

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate sanm.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanm.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0sugarschool.com
alamoheightsvisitorguide.com
anthropologic.com
arbitragebettingtool.com
arbitragemg.com
aspectium.ai
banneradexchange.com
bkrdhomstd.com
breezeband.com
caloin.com
ccc.thebo.ng
certifiedbyrxsugar.com
certifiedinvestmentadvisor.com
chieftruthofficer.com
coltonnewton.com
corporatereengineering.com
correlationarbitrage.com
creditcards.ac
denverwomensmagazine.com
directlenderllc.com
distinctlymontanagifts.org
dramacafe.com
dyvergbrands.com
e-rail.com
enerpactoolsgroup.de
enerpactoolsgroup.uk.com
engravedweddingbands.com
etobicoketaekwondo.com
evavera.com
floridaelite7v7.com
floridakeysreeltor.floridakeysreeltor.com
francineminville.com
freecougar.com
freedombacon.com
freeusesister.com
gamerro.com
getournine.com
gilbertoneillconstruction.com
homeschoolclep.com
homeschoolnfts.org
hoodcanal.cam
horsecommunity.org
hotxxxdesire.com
houseleasepurchase.com
isitgf.com
iss-usa.com
isyouwoke.com
kemalakvardar.com
killenaule.com
lawyerbyzipcode.com
lazirica.com
lbhome.com
lbssonline.org
leavenworth.cam
machineguntour.com
magazineblock.com
majorcbd.com
manor.vc
marschnachzion.de
marvinrealtor.com
millersonstreeservice.com
mm.milimktg.com
notbadbbq.com
oaklandfinancialplanner.com
olmosparkonline.com
pewguide.com
photosurf.com
picocloudconnector.com
poisonivycure.org
portlandhalfmarathon.com
pressegauloise.com
profitpullingtraffic.com
profoundstrategy.org
purpose-events.org
redtedart.de
riskarea.com
roofrenewalofflorida.com
rxsugarpartner.com
salesmaterial.com
sanm.co.za
seatoskyguide.com
sentonesnetwork.com
sextoyswizard.com
shadi.love
shellyschermer.com
showcoaching.com
splittestmarketing.com
stlouisfixerupper.com
the-car-connection.com
tuckpg.com
vwv.co.za
wiggered.com
womensshelters.org
worldwarbtc.com
www.enjoythemaking.com
www.inmytimeofdying.com
www.metaxianity.bible
www.renewableenergyrevolution.com
zodiachoodies.com

Other certificates including the domain name sanm.co.za

(limited to 100 certificates)
sanm.co.za
sanm.co.za
freedomunlimitedusa.com.sanm.co.za
schoolcateringequipment.com.sanm.co.za
takeourpoll.com.sanm.co.za
sanm.co.za
sanm.co.za
sanm.co.za
gemaling.ca
sanm.co.za

Certificate

The complete raw certificate details for sanm.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHhZWBDLFstooZcjc3v6
N5JnVRavt1Nz5efP3MKCb0FVfxpZk4niWyAPRsqCjj9yecUThtAqzFjIm0pyVOIw
eA9MHNCO6OjxvPhkxAU3OiG15zLHAECBmJ8QYBawDbNNEZZdMClYk8VVYQXihmUj
dobMW777+jyRDaqYI05Cf1vqJiL3tLoC2cuvYHbB76uSQb3AMqJCgA+mXSWn5dC+
3ouv7KTe4o2p2KWennRKYEXa/Dh3v5reF+dnVL3FrnUBc2WqzA2peadK4ilL5Epq
iV4/eCVqp/wEVPrqkUFwBLOdxBFeYZ5NzkI0nmt+Z1bY92y6SHes1jezW8Pno172
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428430690726909198998928094011198364357906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 23:04:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-04 23:04:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanm.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24297100857262318156559462989600841049135406547684575327409106767327508264114872463879903509944516764896176057207127222474208075887288667423737810111923442365790759710519269544719143573588211699620553367886510871771865175802489585298171831736691638155287611166382146157973029437003758604218982249685378876500396876084672913201173128306710510285710661667101714252467465698363692131579706114302108280207880356633476473204585423916953204585109915363240888355676828122106044746019609821320225037500610930634553433789727879300372389242936898558491597895710462009129628374859176005908481298954945248642896334649792533558837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							762f9eea6f056691c6db609dd6f9c863962581c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1958 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0sugarschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamoheightsvisitorguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthropologic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragebettingtool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banneradexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkrdhomstd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breezeband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caloin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc.thebo.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedbyrxsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedinvestmentadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chieftruthofficer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coltonnewton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatereengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correlationarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcards.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverwomensmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directlenderllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distinctlymontanagifts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramacafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyvergbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-rail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engravedweddingbands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etobicoketaekwondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evavera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridaelite7v7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridakeysreeltor.floridakeysreeltor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francineminville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecougar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedombacon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeusesister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamerro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getournine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilbertoneillconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolclep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolnfts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodcanal.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsecommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotxxxdesire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseleasepurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isitgf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iss-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isyouwoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemalakvardar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killenaule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyerbyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazirica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbssonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leavenworth.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'machineguntour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazineblock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majorcbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manor.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marschnachzion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvinrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millersonstreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.milimktg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notbadbbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oaklandfinancialplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olmosparkonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photosurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picocloudconnector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivycure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portlandhalfmarathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressegauloise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitpullingtraffic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profoundstrategy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purpose-events.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redtedart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskarea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofrenewalofflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesmaterial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanm.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatoskyguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentonesnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sextoyswizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadi.love'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shellyschermer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splittestmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouisfixerupper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-car-connection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuckpg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiggered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womensshelters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwarbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enjoythemaking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inmytimeofdying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metaxianity.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewableenergyrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zodiachoodies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff0034d3e000004030046304402203b369f580278ef0434124245afc173a2f78ab978f6ca4e00417f75b454ca2f6202205ecd97cd242ec0c023f63db04d43d6a7b47063a24fb5b314be3a92cda05b6e2900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ff0034d6b0000040300473045022100fd9b8e2f77cc98ae0d9245fe56c43e1a496b5f91407891cb5c8dcf947723231c0220072c8d9237f1b53a32b18c6fd2056d562e19ee6b8e8b138855333556f4cbfe8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0044b19cd33058ea4afb18a5113d060364873829b1c727e026c6162c5445b1a4d934b7b249f8fc3038aa4779e34da0a032c1c4c2e260aa491931d8a000b1aa07f4d8f3a7cb3333d1ff89bc328f3cf4de089da7d020ef1bcb00089ec7a953f3c483251b65b832ba0a0d7447f9366873a0b8986a634ec15140ca0ca4070a656dccf2f7ef9fa4d275be69696424fb8d8969f8cba9914160a6df376edf9ac145929bf2e35870004e2491bc5e7985528ab7a8640760bca3da0dbf3d6fcca171aaeb1badde0d7a2ca02b03a7a16e90b73bddb0bffc7baf1a479fac3ede9de294f00c7b3d2f539d50bb56e80340ed8e28585e4b3fa9254def4cd5052ead17a3f25ce565b8