sa-rugby.co.za

Issued by R11

About this certificate

This digital certificate with serial number 03:22:9e:94:d4:36:9a:74:46:2d:34:8b:de:8c:75:a3:c0:c3 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sa-rugby.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:22:9e:94:d4:36:9a:74:46:2d:34:8b:de:8c:75:a3:c0:c3
Serial Number (int): 273117249058058685568265769382494333026499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:98:b3:01:01:6e:26:58:88:88:75:ed:98:f2:c8:04:d6:03:a2:1c
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): a0:cd:a0:71:4b:c8:21:60:69:8b:cc:51:ee:cb:70:74:31:fb:a2:5a
Fingerprint (sha256): 80:3c:4d:62:27:ce:ee:26:7c:3a:33:5d:3d:1f:17:66:52:a6:46:1a:42:6f:51:c8:ee:02:8d:8e:bc:05:93:7c

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate sa-rugby.co.za

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sa-rugby.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about78209.com
americanelectionpolls.com
arbitrageweekly.com
ascensionchurch.nz
atxchiropractors.com
backroad4x4.com
battlegroundnam.com
beinspiredevents.com
bestpoisonivycure.org
bestrateautoloans.com
bettiepardee.net
bonus2buyers.com
brandablesearch.com
britishcolumbiavaccinepassports.com
captiva.net
causeofliberty.com
christmaslightinghuntington.com
chubhan.com
cybertutoring.com
cypherplate.com
dentalpractice.co.in
diamondbellybuttonrings.com
djdukes.com
dumpstersmichigan.com
edelhuren.at
enerpactoolsgroup.es
etechtvnews.com
femdomblog.com
firstforelk.org
fivetalentability.com
fl.cosfacts.org
gainesvillewindowcleaner.com
goldban.com
gonetzeroenergy.com
greerrv.com
gujaratmatrimony.in
homeschoolprayers.org
impossible.uk
interplanetaire.com
ioscocounty.com
landviewer.com.au
lindelloffencefund.com
mazatlan.info
mezetour.com
motioncapturestages.com
myonlinebusinesscard.com
nbradgarrett.com
neurotherapycenter.com
nippedtuckedorsucked.com
ohpublic.statenationals.us
onlinetennisstores.com
piutecounty.com
professorpreponomics.com
quiltstands.com
rasulids.org
realtysanibel.com
redeemer-coop.org
refundcyclops.com
research-papers.com
rxbites.com
rxpeptidefood.com
rxsugarcerealpro.com
ryancrosslin.com
sa-fitness.com
sa-rugby.co.za
sanantonio-magazine.com
sanantoniocondominiumsguide.com
sanibelcaptivaislandhomes.com
sgj.co.in
shaadiu.com
shadowyfigures.org
snaws.com
starpipeusa.com
steera.healthcare
takeactionusa.net
thebigeduh.com
thinkamerika.com
tigerpokerpalace.com
tungstenbracelet.com
verifiedapes.com
vocaltraining.in
washcable.com
whatisadumptruck.com
woodsoncounty.com
wrestlingfunk.com
www.directlendersmortgage.net
www.pianotampa.com

Other certificates including the domain name sa-rugby.co.za

(limited to 100 certificates)
sa-rugby.co.za
gtin.tv.sa-rugby.co.za
greatcastings.com.sa-rugby.co.za
bestcartransporter.com.sa-rugby.co.za
sa-rugby.co.za
sa-rugby.co.za
sa-rugby.co.za
sa-rugby.co.za
sa-rugby.co.za
ketoneteststrips.com.sa-rugby.co.za
zaj.co.za
sa-rugby.co.za
www.sa-rugby.co.za
hydratight.ca

Certificate

The complete raw certificate details for sa-rugby.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJlaGlP9DOWnzSc7wSfJ
FTW1XTqrHB0ZGcYuIo6zFobnlkgYCJ2pC4GuqHCFcTJ07QkU3rbhmMwDXBIE2uXO
ifzXYpWyo57vEfFkySFZCyUAJ7PMdisaTjGv+EU2Ga5Aqkc6SW3Oi+moLvmD4iHI
4fk45B6tkPCe5L4Jjuy7rD8+neQ/bPvgbc7/34fcpFa3TX8ESggxjr0NBHpc4/q6
PvKZ4ajy0M2KaXG2sYfwiEW4/eL1NY88S2pZmAXfZBAGM0FTbVzSBAEkmTxIpYeQ
FLwNC01OL8lUk8pNMTLnJ7DhORlO2c7soClH3B9LKtbKvuIRN4thAa2WFVFrBS6N
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273117249058058685568265769382494333026499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 06:01:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 06:01:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sa-rugby.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24313375225468388096518175582033275116102052929352025985024759639080750335438191511220297500045506524058153420508044214299695852652700127774984952521817654156353993311497983644711499649482299181427034084870233794867005097436407052026292001653260266579452174860320571746970735080404196539474163231434668799102367581427364759974619897593321087904255856302766772147052509695091206822331482442918643735906712836734183429575007457531636431620267617292082407285277097189139002888075427139117814685815492778638520716471402697361237761334887504074345586115976210866303016730275487376705421646033293793657788926038997862354341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5798b301016e2658888875ed98f2c804d603a21c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about78209.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanelectionpolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensionchurch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atxchiropractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backroad4x4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'battlegroundnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinspiredevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpoisonivycure.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrateautoloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettiepardee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonus2buyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandablesearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britishcolumbiavaccinepassports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captiva.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'causeofliberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslightinghuntington.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chubhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybertutoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypherplate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalpractice.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondbellybuttonrings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djdukes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumpstersmichigan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edelhuren.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etechtvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femdomblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstforelk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivetalentability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fl.cosfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainesvillewindowcleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonetzeroenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greerrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gujaratmatrimony.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolprayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impossible.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interplanetaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ioscocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landviewer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindelloffencefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazatlan.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mezetour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motioncapturestages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myonlinebusinesscard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbradgarrett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurotherapycenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nippedtuckedorsucked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohpublic.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinetennisstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piutecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professorpreponomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quiltstands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rasulids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtysanibel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemer-coop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refundcyclops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-papers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxbites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxpeptidefood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarcerealpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryancrosslin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa-rugby.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonio-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniocondominiumsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanibelcaptivaislandhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaadiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadowyfigures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starpipeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steera.healthcare'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeactionusa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebigeduh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkamerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerpokerpalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tungstenbracelet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verifiedapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocaltraining.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatisadumptruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodsoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrestlingfunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directlendersmortgage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianotampa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff6a70e6e0000040300483046022100e9e7a07c7afd9c20287e3d182c1ee39bccfa95894814475c89a08f1a58695786022100b9accfdae58ff37f12c767324dbc292fc87c2b724a168f199214c01e0f9fa51e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff6a70e8a0000040300473045022100e76e018e73abe191e5677d7765c22ba451364da7df164886a3a6f978eddfa28602204180f99967cf3e428b33eade3ade0836d8b67f749d275fc49bbfa63665817b36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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