xza.co.za

Issued by R10

About this certificate

This digital certificate with serial number 04:6f:d2:87:d4:c0:e5:81:d9:de:01:df:90:99:90:4a:e5:a0 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xza.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6f:d2:87:d4:c0:e5:81:d9:de:01:df:90:99:90:4a:e5:a0
Serial Number (int): 386500329609609562790391370489979061593504
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a9:1c:c2:d7:26:c3:20:12:52:2b:61:5a:61:49:7f:d4:42:fc:26:28
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 62:ca:e8:3e:81:0e:5b:5f:15:a8:f9:47:a7:11:1c:a9:bb:5b:59:fb
Fingerprint (sha256): 7d:23:25:a7:f0:e0:fc:d4:77:8e:49:f9:d9:88:4f:89:97:c2:ed:90:10:a9:de:56:d4:cb:88:59:97:c3:af:b6

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate xza.co.za

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xza.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agentgoldusa.com
arbitrage4.com
aspectium.co.uk
bearsofficial.com
beliefsjournal.com
bestfaithfilms.org
bidodd.com
bidsdeals.com
bombinthebrain.com
botanicinstitute.com
buonforno.com
chocolateandcocoa.com
cliquebids.com
coeurdalene.cam
consumerhq.com
coorghotels.com
cuffusa.com
cusanno.com
digital-edge.com
donnybrookwrestling.com
dragtonight.com
drjohnsonresearchinstitute.com
dumptrucker.com
ecofriendlyhemp.com
ecommercecorp.com
enerpactoolgroup.co.za
ensoku.com
eringeecomposer.org
fetishaddict.com
florabrokers.com
fundarbitrage.com
getyour9.com
glennlazarroberts.com
goldenwingsschools.com
graciemovies.com
growingventures.com
grupociclon.com
hempdrivethru.com
hilton-million.com
individualinsurancequote.com
jaycehenline.com
jeryco.com
kalifontanilla.com
kneearthritishouston.com
lesarbitrageurs.com
livingwater.bible
mirecyc.com
mishawakarecycling.com
mrs.vc
musicdjs.com
namecrew.com
nc.cosfacts.org
njiphonerepairs.com
nycdumpsterrentals.com
organicdomains.com
ostomyliving.com
patioresurfacingmyrtlebeach.com
pornganes.com
pre-reac.com
prowrestlingbanners.com
pureadventures.org
rbristolloans.com
reliablesprinklers.com
restaurantmanagerjobfair.com
rev2a.com
sabcs.mobi
saescuela.com
sayerstewart.com
seatoskyshop.com
shemaleflorida.com
shipwrecksrewards.com
signsredlands.com
solardestin.com
sonomagreenhomes.com
southaustraliastateelections.com
southernindianapatriots.com
spca-penang.com
starthomebusiness.com
stayeducated.org
stflanagan.ie
supplyhelp.com
synchrokineticmassage.com
texasmarksmanship.com
thebannernetwork.com
thebestcookiebaskets.com
treatytrader.com
turkiye-bitcoin.com
unndun.com
ut.cosfacts.org
villageswindowwashing.com
weegensrolloff.com
www.colourenvelopes.com
www.envelopewholesalers.com
www.rngsales.com
xza.co.za
yhvh.name
zapmedia.org
zeroslender.com

Other certificates including the domain name xza.co.za

(limited to 100 certificates)
xza.co.za
xza.co.za
xza.co.za
xza.co.za
xza.co.za
leaselock.ca
xza.co.za
xza.co.za
xza.co.za
xza.co.za
xza.co.za
xza.co.za

Certificate

The complete raw certificate details for xza.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMPzCCCyegAwIBAgISBG/Sh9TA5YHZ3gHfkJmQSuWgMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTAwHhcNMjQwNjI2MDAzNDU2WhcNMjQwOTI0MDAzNDU1WjAUMRIwEAYDVQQD
Ewl4emEuY28uemEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLN0dg
HksN3wNEI7rbeZuADqLxwfYXtHkdqQdaq3NN1gIHXHQNgGCeg9gujtHQCYYbwXvr
z6OpxBlYAhPDDE/cmj1oxA4ZYAQKrRWIZgaVN7WC9nxLQ9vNLkIKbtKgJgswCCEq
mZ0O+cLipHGiPIS4qxZwIGf3GDmJANusUWnAHhr22NeJ8Pjv+PfDUjqMAvmm+2qf
La4XgmCduO80vAmHdRO6noXBwa6VAe1sw+wSuakdGbBYhYUrOsDS0ho/71eWBfS4
fE5w9BXIij05ll8W/Nmr9bjdnA2ZnjoDzLtwO/82Z60jr5OFDsNerO3zG4VaGFPC
g+b1oFlHitLXBlfpAgMBAAGjgglqMIIJZjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FKkcwtcmwyASUithWmFJf9RC/CYoMB8GA1UdIwQYMBaAFLu8w0el5LypxsOkcgwQ
jaI14cjoMFcGCCsGAQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDovL3IxMC5v
LmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDovL3IxMC5pLmxlbmNyLm9yZy8w
ggdvBgNVHREEggdmMIIHYoIQYWdlbnRnb2xkdXNhLmNvbYIOYXJiaXRyYWdlNC5j
b22CD2FzcGVjdGl1bS5jby51a4IRYmVhcnNvZmZpY2lhbC5jb22CEmJlbGllZnNq
b3VybmFsLmNvbYISYmVzdGZhaXRoZmlsbXMub3JnggpiaWRvZGQuY29tgg1iaWRz
ZGVhbHMuY29tghJib21iaW50aGVicmFpbi5jb22CFGJvdGFuaWNpbnN0aXR1dGUu
Y29tgg1idW9uZm9ybm8uY29tghVjaG9jb2xhdGVhbmRjb2NvYS5jb22CDmNsaXF1
ZWJpZHMuY29tgg9jb2V1cmRhbGVuZS5jYW2CDmNvbnN1bWVyaHEuY29tgg9jb29y
Z2hvdGVscy5jb22CC2N1ZmZ1c2EuY29tggtjdXNhbm5vLmNvbYIQZGlnaXRhbC1l
ZGdlLmNvbYIXZG9ubnlicm9va3dyZXN0bGluZy5jb22CD2RyYWd0b25pZ2h0LmNv
bYIeZHJqb2huc29ucmVzZWFyY2hpbnN0aXR1dGUuY29tgg9kdW1wdHJ1Y2tlci5j
b22CE2Vjb2ZyaWVuZGx5aGVtcC5jb22CEWVjb21tZXJjZWNvcnAuY29tghZlbmVy
cGFjdG9vbGdyb3VwLmNvLnphggplbnNva3UuY29tghNlcmluZ2VlY29tcG9zZXIu
b3JnghBmZXRpc2hhZGRpY3QuY29tghBmbG9yYWJyb2tlcnMuY29tghFmdW5kYXJi
aXRyYWdlLmNvbYIMZ2V0eW91cjkuY29tghVnbGVubmxhemFycm9iZXJ0cy5jb22C
FmdvbGRlbndpbmdzc2Nob29scy5jb22CEGdyYWNpZW1vdmllcy5jb22CE2dyb3dp
bmd2ZW50dXJlcy5jb22CD2dydXBvY2ljbG9uLmNvbYIRaGVtcGRyaXZldGhydS5j
b22CEmhpbHRvbi1taWxsaW9uLmNvbYIcaW5kaXZpZHVhbGluc3VyYW5jZXF1b3Rl
LmNvbYIQamF5Y2VoZW5saW5lLmNvbYIKamVyeWNvLmNvbYISa2FsaWZvbnRhbmls
bGEuY29tghhrbmVlYXJ0aHJpdGlzaG91c3Rvbi5jb22CE2xlc2FyYml0cmFnZXVy
cy5jb22CEWxpdmluZ3dhdGVyLmJpYmxlggttaXJlY3ljLmNvbYIWbWlzaGF3YWth
cmVjeWNsaW5nLmNvbYIGbXJzLnZjggxtdXNpY2Rqcy5jb22CDG5hbWVjcmV3LmNv
bYIPbmMuY29zZmFjdHMub3JnghNuamlwaG9uZXJlcGFpcnMuY29tghZueWNkdW1w
c3RlcnJlbnRhbHMuY29tghJvcmdhbmljZG9tYWlucy5jb22CEG9zdG9teWxpdmlu
Zy5jb22CH3BhdGlvcmVzdXJmYWNpbmdteXJ0bGViZWFjaC5jb22CDXBvcm5nYW5l
cy5jb22CDHByZS1yZWFjLmNvbYIXcHJvd3Jlc3RsaW5nYmFubmVycy5jb22CEnB1
cmVhZHZlbnR1cmVzLm9yZ4IRcmJyaXN0b2xsb2Fucy5jb22CFnJlbGlhYmxlc3By
aW5rbGVycy5jb22CHHJlc3RhdXJhbnRtYW5hZ2Vyam9iZmFpci5jb22CCXJldjJh
LmNvbYIKc2FiY3MubW9iaYINc2Flc2N1ZWxhLmNvbYIQc2F5ZXJzdGV3YXJ0LmNv
bYIQc2VhdG9za3lzaG9wLmNvbYISc2hlbWFsZWZsb3JpZGEuY29tghVzaGlwd3Jl
Y2tzcmV3YXJkcy5jb22CEXNpZ25zcmVkbGFuZHMuY29tgg9zb2xhcmRlc3Rpbi5j
b22CFHNvbm9tYWdyZWVuaG9tZXMuY29tgiBzb3V0aGF1c3RyYWxpYXN0YXRlZWxl
Y3Rpb25zLmNvbYIbc291dGhlcm5pbmRpYW5hcGF0cmlvdHMuY29tgg9zcGNhLXBl
bmFuZy5jb22CFXN0YXJ0aG9tZWJ1c2luZXNzLmNvbYIQc3RheWVkdWNhdGVkLm9y
Z4INc3RmbGFuYWdhbi5pZYIOc3VwcGx5aGVscC5jb22CGXN5bmNocm9raW5ldGlj
bWFzc2FnZS5jb22CFXRleGFzbWFya3NtYW5zaGlwLmNvbYIUdGhlYmFubmVybmV0
d29yay5jb22CGHRoZWJlc3Rjb29raWViYXNrZXRzLmNvbYIQdHJlYXR5dHJhZGVy
LmNvbYITdHVya2l5ZS1iaXRjb2luLmNvbYIKdW5uZHVuLmNvbYIPdXQuY29zZmFj
dHMub3Jnghl2aWxsYWdlc3dpbmRvd3dhc2hpbmcuY29tghJ3ZWVnZW5zcm9sbG9m
Zi5jb22CF3d3dy5jb2xvdXJlbnZlbG9wZXMuY29tght3d3cuZW52ZWxvcGV3aG9s
ZXNhbGVycy5jb22CEHd3dy5ybmdzYWxlcy5jb22CCXh6YS5jby56YYIJeWh2aC5u
YW1lggx6YXBtZWRpYS5vcmeCD3plcm9zbGVuZGVyLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AEiw42vapkc0D+VqAvqd
MOscUgHLVt0sgdm7v6s52IRzAAABkFIufDEAAAQDAEgwRgIhAKd1baYEu7pSjeLG
9BOv7gyFKTgewj8B+m10HuPIPpWaAiEA3WSGQAhTrM90mR1/+YvH4sY7kGb81wK3
1JIa6ijw2vAAdQAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAZBS
LnyTAAAEAwBGMEQCICg5AL6gh1G6UtFAw6DDLAaEulebGCZb3d94yMtcN1CtAiBJ
wymY4bAitiFcy5cTO+E26oL7ezCDtPxW9sQWhAXXpzANBgkqhkiG9w0BAQsFAAOC
AQEAI+t4LbiGN5TsE6XwHge5LyeNXY9UyEInmFC/hZ1QuqolAfipvS0KWTqHtJVY
vfY17dfeoJ7G1l6yEZkWoKkpy9rJraB7SUHi94s5tc4VJ2f3Z3e8ay1s0hQI/Wt2
doJn3qgcBRovo+F2D8aYUh5fYWr50XZGrpah9wQHFWqs0/6FnMHx+hV4Iqi4Gaja
gfnxMD1wZmSnPJ6p7hVo0dAV8CAT+i2p/xfZwhOBaE1rgmN1z+C2TA7PnPYapjCy
opL53CYWMF5mfzwKiSIAv1DMAxE1YCeTQfTl9gWT5WrH1MMspJUaEgbyLUPfpG3l
WovLomDApcLYgrZg1dpgow0tPg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzdHYB5LDd8DRCO623mb
gA6i8cH2F7R5HakHWqtzTdYCB1x0DYBgnoPYLo7R0AmGG8F768+jqcQZWAITwwxP
3Jo9aMQOGWAECq0ViGYGlTe1gvZ8S0PbzS5CCm7SoCYLMAghKpmdDvnC4qRxojyE
uKsWcCBn9xg5iQDbrFFpwB4a9tjXifD47/j3w1I6jAL5pvtqny2uF4JgnbjvNLwJ
h3UTup6FwcGulQHtbMPsErmpHRmwWIWFKzrA0tIaP+9XlgX0uHxOcPQVyIo9OZZf
FvzZq/W43ZwNmZ46A8y7cDv/NmetI6+ThQ7DXqzt8xuFWhhTwoPm9aBZR4rS1wZX
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386500329609609562790391370489979061593504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 00:34:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 00:34:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xza.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25653634905474571718655539151986910369972750114974048565472535781293999611796517201824146741165129841551333632522621826457726567727420140492415580496267264131459002689447818774905853249861844657202809537616426002963729586690793547941739900894284452799762916531472662729823323036835251258444053735195344981492041172316312339679694057934982170155400312042932815572541088310023151939910077925991945264844784431384326753933178858731999022283409343462769753377346088908139457208689082842311690360912494347607723822286901194748180240403611486914934663899113149975980576794861041208053169568142591439316490195658555689162729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a91cc2d726c32012522b615a61497fd442fc2628
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentgoldusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectium.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearsofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beliefsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfaithfilms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidodd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidsdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bombinthebrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buonforno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolateandcocoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliquebids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coeurdalene.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coorghotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuffusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusanno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-edge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnybrookwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragtonight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drjohnsonresearchinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumptrucker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecofriendlyhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommercecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolgroup.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eringeecomposer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetishaddict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florabrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyour9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glennlazarroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenwingsschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciemovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growingventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupociclon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempdrivethru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilton-million.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individualinsurancequote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaycehenline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeryco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalifontanilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kneearthritishouston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesarbitrageurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwater.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirecyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishawakarecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrs.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicdjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njiphonerepairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycdumpsterrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicdomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostomyliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patioresurfacingmyrtlebeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornganes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-reac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prowrestlingbanners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureadventures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbristolloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reliablesprinklers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantmanagerjobfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rev2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabcs.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saescuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sayerstewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seatoskyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shemaleflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwrecksrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signsredlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solardestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonomagreenhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southaustraliastateelections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernindianapatriots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spca-penang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starthomebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayeducated.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stflanagan.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplyhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synchrokineticmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasmarksmanship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebannernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestcookiebaskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkiye-bitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unndun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ut.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageswindowwashing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weegensrolloff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colourenvelopes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envelopewholesalers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rngsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xza.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhvh.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zapmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeroslender.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000190522e7c310000040300483046022100a7756da604bbba528de2c6f413afee0c8529381ec23f01fa6d741ee3c83e959a022100dd6486400853accf74991d7ff98bc7e2c63b9066fcd702b7d4921aea28f0daf00075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190522e7c9300000403004630440220283900bea08751ba52d140c3a0c32c0684ba579b18265bdddf78c8cb5c3750ad022049c32998e1b022b6215ccb97133be136ea82fb7b3083b4fc56f6c4168405d7a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0023eb782db8863794ec13a5f01e07b92f278d5d8f54c842279850bf859d50baaa2501f8a9bd2d0a593a87b49558bdf635edd7dea09ec6d65eb2119916a0a929cbdac9ada07b4941e2f78b39b5ce152767f76777bc6b2d6cd21408fd6b76768267dea81c051a2fa3e1760fc698521e5f616af9d17646ae96a1f70407156aacd3fe859cc1f1fa157822a8b819a8da81f9f1303d706664a73c9ea9ee1568d1d015f02013fa2da9ff17d9c21381684d6b826375cfe0b64c0ecf9cf61aa630b2a292f9dc2616305e667f3c0a892200bf50cc03113560279341f4e5f60593e56ac7d4c32ca4951a1206f22d43dfa46de55a8bcba260c0a5c2d882b660d5da60a30d2d3e