key1.omnizant.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number cb:3e:40:5f:8e:84:4c:8b:fd:52:e6:eb:13:7c:a4:17 was issued on by Sectigo Limited.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=key1.omnizant.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): cb:3e:40:5f:8e:84:4c:8b:fd:52:e6:eb:13:7c:a4:17
Serial Number (int): 270156511194563965159485089305727902743
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:72:8e:b3:70:e7:3a:7c:12:dc:7b:81:66:04:65:98:5e:6a:05:84
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): b5:93:c1:fa:b0:72:94:22:e5:1e:e5:b4:7a:76:f3:5f:1f:cf:80:5d
Fingerprint (sha256): 9b:d7:69:09:0c:ef:a4:8f:30:4e:2c:f4:be:db:a7:f6:de:32:35:22:c9:db:ac:d0:b8:1e:17:68:1d:20:db:4a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate key1.omnizant.net

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for key1.omnizant.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

key1.omnizant.net
aliceweinsteinlaw.com
angerslaw.com
attorneyjeffjones.com
banjokolaw.com
bankruptcylawclinic.net
bbbattys.com
berfondlaw.com
borowsky.com
brianmandellaw.com
cameronlawoffice.com
chicagometroweddingjudge.com
christinehubbardlaw.com
conathanlaw.com
conlonlawfirm.com
coraliesfoundation.com
danieljkelleylaw.com
deanvisaoffice.com
dldunnlaw.com
ehill-law.com
elrod-hillfirm.com
ericsappenfield.com
faulk-associates.com
fowlkeslawfirm.com
fuccilaw-adr.com
gabesricelaw.com
galdean.com
gandelot.com
hrzlfirm.com
itrustlaw.com
jptlawchambers.com
kourlesislaw.com
krupplawyer.com
ksalomonelaw.com
langwallace.com
llo-law.com
lugerelderlaw.com
lweinerlaw.com
maclaw-llc.com
marathonadvisors.net
masonlawsc.com
mccarthylaw.org
mcllawfirm.com
mcnultylawpc.com
mungerandstone.com
mytaxlaw.com
northshorechild.org
nozhniklaw.com
oneallawyers.com
pkrlegal.com
pljlaw.com
ppbf.com
randrlegal.com
raymondiryami.com
rbournelaw.com
realestateforeclosurefirm.com
riversidetrustlaw.com
robinslegal.com
rollerlawoffice.com
rosezuckerlaw.com
rossillolicata.com
sawyerlaw.com
seibel-law.com
senkforlaw.com
shandselbert.com
shawlawfirm.net
slonebates.com
socalmedium.com
tewilliamslaw.com
thplaw.net
tlesterlaw.com
valentineandvalentine.com
wardlegalgroup.com
washingtonlaw.net
webblawllc.com
wjhunterlaw.com
www.aliceweinsteinlaw.com
www.brianmandellaw.com
www.campanarolaw.com
www.jqvlaw.net
www.lawsonandbeck.com
www.mccarthylaw.org
www.mcllawfirm.com
www.mungerandstone.com
www.piersonelderlaw.com
www.sandiego-estateplanninglawyers.com
www.sgmblaw.com
www.waypointplanning.com
youngerassociates.net

Other certificates including the domain name omnizant.net

(limited to 100 certificates)
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net

Certificate

The complete raw certificate details for key1.omnizant.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqeQ6c1K2iRMxbQ20/6a
6w7g2G+p+rGgb+gUYG8c1UIGpNib9FfTu4+JNGS+1O8Bo+BBLPwAsvoh6hsBEUt5
NXlTN009t1PffEgYEAb4pz36g+cqwWIltJIfI0DMbTEGGzVv+uE7HrwtsihJ8JAB
n5LNd9EwSkrriPNq2i/3g/FDiLuNG7NVxpWIHFZLoJQqbmiCyei7iE7bA2Pu926Y
N2TiCv95IgUXsjTd/xOOa/XemqurNLqt2lSvDqNhUPFEkpdzE8qIh0FQIgFuk7GS
DM+XGSlbrC9vR/btdE68h6mTGmABdRMlb0PcYZZRQv3934WDGyneLtxFQReSsP5S
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270156511194563965159485089305727902743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'key1.omnizant.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24067907851111097232814689868365709147606177934128092281446989505644367164497352846385524692028259357035314006831110999333095575620433122161495908551918473717419942380219975373577096987742596188096555104980232614295265486991148887587095900413715194927781298424447227971670413261446461014844960445821138860288913911761490399518876751324009640226979274474982912289630616055332988463806543448752067482617007485836166425379116929954433844561141711758643135277270813241099866631649479236423237192316237179103342460232812474407760267395808322114324869067718791402952104938492687107191960542680243838952447353226332204847661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b728eb370e73a7c12dc7b81660465985e6a0584
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1692 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'key1.omnizant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliceweinsteinlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angerslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneyjeffjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banjokolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcylawclinic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbbattys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berfondlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borowsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianmandellaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagometroweddingjudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinehubbardlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conathanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conlonlawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coraliesfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danieljkelleylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanvisaoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dldunnlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehill-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elrod-hillfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericsappenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulk-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fowlkeslawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuccilaw-adr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabesricelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galdean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandelot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrzlfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itrustlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jptlawchambers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kourlesislaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krupplawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksalomonelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langwallace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llo-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lugerelderlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lweinerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maclaw-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonadvisors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masonlawsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccarthylaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcllawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnultylawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mungerandstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytaxlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorechild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nozhniklaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneallawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pljlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raymondiryami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbournelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateforeclosurefirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riversidetrustlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollerlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosezuckerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossillolicata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sawyerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seibel-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senkforlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shandselbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawlawfirm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slonebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socalmedium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewilliamslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thplaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlesterlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentineandvalentine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardlegalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webblawllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjhunterlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliceweinsteinlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianmandellaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campanarolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jqvlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawsonandbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccarthylaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcllawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mungerandstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piersonelderlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiego-estateplanninglawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgmblaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waypointplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngerassociates.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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