alexanderforbes.randgolive.dev

Issued by R3

About this certificate

This digital certificate with serial number 03:52:53:0b:fc:b6:df:71:fa:e8:00:33:ae:44:56:b8:42:f0 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alexanderforbes.randgolive.dev

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:53:0b:fc:b6:df:71:fa:e8:00:33:ae:44:56:b8:42:f0
Serial Number (int): 289350400047369184492919458707964828336880
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:1d:07:8a:49:28:74:0e:20:42:9e:76:64:85:bf:46:33:7f:a7:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:98:bb:30:90:de:37:e1:af:3a:33:c3:cc:ab:33:10:e8:ec:96:85
Fingerprint (sha256): 8f:83:5c:9c:65:b6:b3:19:25:8c:8d:34:49:9d:a3:b1:8d:34:2f:b5:4b:58:89:ab:3c:5b:f7:d2:0c:e7:67:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alexanderforbes.randgolive.dev

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alexanderforbes.randgolive.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alexanderforbes.randgolive.dev
alwayshealth.co.za
amavaluehealth.co.za
amavaluehome.co.za
amavaluetech.co.za
apinew.directrewards.co.za
apitest.randgolive.dev
bidvest.randgolive.dev
cellchealthassist.co.za
cellchomeassist.co.za
cellcsafetyassist.co.za
cellctechassist.co.za
compendium.randgolive.dev
coupons.fedgroupmall.co.za
coupons.tendopro.co.za
dealsontap.randgolive.dev
dhlyellowrewards.randgolive.dev
dialaguard.co.za
dialaguard.randgolive.dev
dreamrewards.co.za
dreamrewards.randgolive.dev
emobile.randgolive.dev
emobilecoupons.co.za
extremelifestyle.co.za
fedgroup.randgolive.dev
firsthealth.co.za
firsthealth.randgolive.dev
guard247.co.za
guard247.randgolive.dev
homeangel.co.za
homeangel.randgolive.dev
icebolethu.randgolive.dev
images.iingxoxo.com
jetclubcoupons.co.za
justrewards.randgolive.dev
learnright.co.za
lekelela.gooutbound.co.za
mall.1callassist.co.za
mccrystal.randgolive.dev
mihandyman.co.za
mihandyman.randgolive.dev
morebuy.randgolive.dev
morebuyonline.co.za
motorhappy.randgolive.dev
mydiscountsonline.co.za
mytechbuddy.co.za
mytechbuddy.randgolive.dev
mytechzone.co.za
mytechzone.randgolive.dev
nedbank.mycoupons.co.za
oneloyaltymall.co.za
onespark.randgolive.dev
portal.sadealz.co.za
qa.extremelifestyle.co.za
randgopartnersmall.randgolive.dev
ravens.randgolive.dev
sadealz.randgolive.dev
saveonhealth.co.za
teljoyrewards.co.za
test1.randgolive.dev
test2.randgolive.dev
test3.randgolive.dev
test4.randgolive.dev
test5.randgolive.dev
tfgclub.randgolive.dev
tfgclubcoupons.co.za
tfgfitlifecoupons.co.za
tfgmykitchencoupons.co.za
tfgsoccerclubcoupons.co.za
tfgsportsclubcoupons.co.za
werksmans.randgolive.dev
www.alwayshealth.co.za
www.cellchealthassist.co.za
www.cellchomeassist.co.za
www.cellcsafetyassist.co.za
www.cellctechassist.co.za
www.dreamrewards.co.za
www.extremelifestyle.co.za
www.genesisbrokersmall.co.za
www.guard247.co.za
www.homeangel.co.za
www.learnright.co.za
www.morebuyonline.co.za
www.mydiscountsonline.co.za
www.mytechbuddy.co.za
www.oneloyaltymall.co.za
www.saveonhealth.co.za
www.teljoyrewards.co.za
www.tfgclubcoupons.co.za
www.tfgfitlifecoupons.co.za
www.tfgmykitchencoupons.co.za
www.tfgsoccerclubcoupons.co.za
www.tfgsportsclubcoupons.co.za
www.yourquicksure.co.za
yourquicksure.co.za

Other certificates including the domain name randgolive.dev

(limited to 100 certificates)
alexanderforbes.randgolive.dev
api.iingxoxo.com
crm.iingxoxo.com
crm.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
alexanderforbes.randgolive.dev
api.iingxoxo.com
alexanderforbes.randgolive.dev
api.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
api.iingxoxo.com
api.iingxoxo.com
crm.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
crm.iingxoxo.com

Certificate

The complete raw certificate details for alexanderforbes.randgolive.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhasZr81Yh7bOngK6E1RW
T7fczYPpsLgNStSjrFBG/ggctXJnyps38Qs6lSlL3JzUKu3f2q10gbe1zlGdX/1i
PqtaEAWD858GN5vuxCXGlvUjXLk4VF6PrsQu8w0EuIpanri7SBDqAzTzj9k0It68
dcdA27NrF2tSc3SWCmHU9ZmuRrL+0JtlYHv3DGstPbdxAEnrUHt/yvx1evsnqa70
5S2yduzH/zux1QNzxv+/6Fm+6WIRkYj6Y3OaGuK81Zl1cRtXTc6VZ0xR+s8kCoIC
gLJqSgEDW+Yz7aJayHj75FiczFdDveBUXYOHYim31c9WoakfBctaowaYEEsgPzwX
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289350400047369184492919458707964828336880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 05:07:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 05:07:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alexanderforbes.randgolive.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16874067282151456949182019665010326779233701726055189421788060302959231157174828801643307247559551821019650378358341581997480110527167313249404944780507227486305016998242631682861725430896998851872451558458343208773616907488734905900012588372909579667956489694586015736909829884906359298156239970943604127963549530522406721236328658448468111277835707067974075818741592544004656949615772072141045025613226186160493193858494997085348891777374570109600695529110912099226733245187185194645296773852663406340405306174880090999132530261706074891214218791737996155144111926748918669365144437056671231604841922737876527486817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d1d078a4928740e20429e766485bf46337fa7f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexanderforbes.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwayshealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavaluehealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavaluehome.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavaluetech.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apinew.directrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apitest.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvest.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellchealthassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellchomeassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellcsafetyassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellctechassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupons.fedgroupmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupons.tendopro.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealsontap.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhlyellowrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialaguard.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialaguard.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emobile.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emobilecoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremelifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedgroup.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthealth.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guard247.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guard247.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeangel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeangel.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icebolethu.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iingxoxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnright.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekelela.gooutbound.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.1callassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccrystal.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mihandyman.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mihandyman.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morebuy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morebuyonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorhappy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiscountsonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechbuddy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechbuddy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechzone.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechzone.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedbank.mycoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneloyaltymall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onespark.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.sadealz.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.extremelifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randgopartnersmall.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravens.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadealz.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveonhealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teljoyrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgclub.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgfitlifecoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgmykitchencoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgsoccerclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgsportsclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werksmans.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alwayshealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellchealthassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellchomeassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellcsafetyassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellctechassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extremelifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesisbrokersmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guard247.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeangel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnright.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morebuyonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydiscountsonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytechbuddy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneloyaltymall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saveonhealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teljoyrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgfitlifecoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgmykitchencoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgsoccerclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgsportsclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourquicksure.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourquicksure.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d8c7acfc40000040300473045022100989a6f6c2995a3c817437529bf51693b4cdeba314e46d7135715bdd70940c8ce02204bdfbd268348cadfc7ba168fd0e2afde091030021754393b9852ac79cee743e700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d8c7ad0b40000040300473045022007deb36abdadfed6c4f14fc606e59e668b7b684f759ebcb0eb6a27f799e2b25e022100bb7fe9f7543fcdb13f90081128a234fdd43b37685c6a96baf20cf8dec1f9d7d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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