sanb.co.za

Issued by R11

About this certificate

This digital certificate with serial number 03:49:1b:b0:4b:63:7b:50:9a:11:9d:ea:94:41:1b:f7:1c:35 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sanb.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:49:1b:b0:4b:63:7b:50:9a:11:9d:ea:94:41:1b:f7:1c:35
Serial Number (int): 286214275109705015091559526921284693204021
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:f2:3e:d6:c3:b6:45:5b:78:e6:81:2b:0e:fb:24:e7:d4:37:27:59
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): f4:71:ce:f0:cd:3c:ac:37:bf:75:fe:c1:39:af:bc:ca:ee:ec:34:52
Fingerprint (sha256): 8b:18:35:62:ff:f4:78:9a:f0:56:49:ae:03:19:f3:0b:95:01:26:74:0d:3e:27:34:71:8c:d4:06:1b:a5:7d:7c

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate sanb.co.za

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanb.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

2041nettlewood.com
acupuncturenetwork.com
advanceddentistry.in
advantagebasketballcamp.com
agencypros.com
aislinnwaltersmusic.com
altowalker.net
americanorganics.com
anchoredmarine.com
arbitrage.com.co
arbitragest.com
arbitrageur.fr
artgallerystudio.com
bankruptcycreditrepairs.com
befitpal.com
bestcoinshop.com
billboardadvertisingtruck.co
boothlaw.us
burrow.pro
businessvideothatworks.com
centerforquantummedicine.com
centralbankdepression.com
certifiedallulose.com
clearancehq.com
contact.cmcsmen.net
contactosexuales.es
containerhomesaustralia.net
david-brenner.com
eaglecircuits.com
eghezee.com
enhancedgeothermalsystems.com
europeanresort.com
gacalls.galandnsoil.us
gaysexstories.org
gigvideo.com
gunnisonco.com
happypet.co
helpyougetcredit.com
hexatp.in
homeschoolregistration.org
horsecommunityassociation.org
iguassufalls.com
inamarket.in
indianacourt.com
inrecyc.com
interviewquestionstoask.com
itsupport.statenationals.us
javier.rodriguez.photos
joesproduce.net
katalyst-training.com
koreanreports.com
matemuslim.com
michianascrapandmetal.com
microphone.parts
movetogoldira.com
musicmagazine.in
nancyandpj.com
norwoodfoundrysaskatchewan.com
ohiobirthinjurylawyers.com
olsburg.com
onefaith.us
operationenduringsupport.org
ottawacountyrepublicans.net
pawleysislandepoxy.com
pennyu.com
pensacolapressurewasher.com
pill4.com
pinkchic.net
pixwy.com
poisonivyguy.net
poisonivyremovaldirectory.com
prepaidcardsdirect.com
prhemp.com
punjabmatrimony.in
realandchic.com
rxsugarfiber.com
sanb.co.za
scottsdaleembroidery.com
sellmyboatforcash.com
shipsheoak.com
shipwreckgurus.com
showinfluencers.com
strongleadership.co
sweeney-aero.net
tgirl.in
threeriversdumpster.com
tiktok.ambaalamps.com
trivial.net
truckersforthehomeless.com
ttrust.com
venisonmeat.com
videosadult.com
vintageatv.com
wallsts.com
wgagroup.llc
woodcarvings.com
www.bananahackers.net
www.patriotclub.us

Other certificates including the domain name sanb.co.za

(limited to 100 certificates)
sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
modalatmaintowns.ca
freedecisionpackage.com.sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
sanb.co.za
nadinewestgate.ca
sanb.co.za
revivedpro.ca

Certificate

The complete raw certificate details for sanb.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdV2tplmKSs+eyki9BcN
tkw12YAP+trUcEA0M/9vn/FJED1q6j8yHXJXOBKZbEXukfDatbh9+50bd3+CP0Ru
bbnRjLn3yjSVvFd6LQx+nWdj3PzthSwL3I4jqWZ3p8gSB24yaJ1OJQXw82aL3j5Y
1Z+qk6shESTDFj9T9IRj/jRl+UwHodlH/DcqsH1cnYxg543tClUhduRZdteo9Rf3
oNDSM4N3DUlufxdfl7LdaU/k+x50sZIZcQAEuIdMJfqSlKs242H9dltvtzvVWNxg
IauW4a39Oxx9fmPdjWv0Lag1AkqZCHg17wciL5OgLTWI2yzUF0EPOQ5rC/GlF4YG
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286214275109705015091559526921284693204021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 11:00:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 11:00:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanb.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24974208963692640308951558340866860299560985616140703582695097183528191866969334089784651404904626813483493736018640357682203672279175998368673297663919442674003862066235300152307895524227450678468439183368513735454810440276787760095269295226491008000775800300546432001425360058881915844035811560221364907235578196207348684931873704069814524003535312804174244814272290456925766105208045977251303163315292263794854783974067706579892454841354197097833192566773087138397704158829153079511029411468186633408352836163367098628955614359053660291482049711535246986067284785732257710881674544717399590984725383420322265827031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8f23ed6c3b6455b78e6812b0efb24e7d4372759
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1974 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2041nettlewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acupuncturenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceddentistry.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagebasketballcamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencypros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aislinnwaltersmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altowalker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanorganics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchoredmarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artgallerystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcycreditrepairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'befitpal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcoinshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billboardadvertisingtruck.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boothlaw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burrow.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessvideothatworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerforquantummedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralbankdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedallulose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearancehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.cmcsmen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactosexuales.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'containerhomesaustralia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'david-brenner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglecircuits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eghezee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhancedgeothermalsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeanresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gacalls.galandnsoil.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaysexstories.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunnisonco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happypet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpyougetcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexatp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolregistration.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsecommunityassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iguassufalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inamarket.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianacourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inrecyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewquestionstoask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javier.rodriguez.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joesproduce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katalyst-training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreanreports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matemuslim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michianascrapandmetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microphone.parts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movetogoldira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicmagazine.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nancyandpj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwoodfoundrysaskatchewan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiobirthinjurylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onefaith.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operationenduringsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawacountyrepublicans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawleysislandepoxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensacolapressurewasher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pill4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkchic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixwy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyguy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyremovaldirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidcardsdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabmatrimony.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realandchic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarfiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanb.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottsdaleembroidery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellmyboatforcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipsheoak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipwreckgurus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showinfluencers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strongleadership.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweeney-aero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgirl.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threeriversdumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktok.ambaalamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trivial.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckersforthehomeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venisonmeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videosadult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintageatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallsts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgagroup.llc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodcarvings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bananahackers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patriotclub.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca00000190546b366d000004030046304402207847d03977f3cb9e552a9a3b9a24e1907044db99a63741d69bbef39c63ede99902203c5e4d3bf32cfe122294ed3714cfd7f56511863ca299262e17848dff39c158ce007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000190546b366700000403004630440220350f3f4c2738a0f77b361be3df88df97858d960afb217a089140bd66aecf045a02200c966187d34a54cc88d8db3a691c346740820c2891911736a758e363b97e44a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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