southafricafiduciary.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:26:70:9e:d4:77:6a:d3:72:79:09:03:62:8b:b2:ed:d0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=southafricafiduciary.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:26:70:9e:d4:77:6a:d3:72:79:09:03:62:8b:b2:ed:d0
Serial Number (int): 298478731212205060852068834784681229741520
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:07:65:5a:d2:f4:01:03:77:53:56:2a:b8:1b:bc:59:01:4b:4d:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:17:7a:5c:c0:1f:af:1b:dd:37:38:a4:0f:37:60:26:81:3b:ab:02
Fingerprint (sha256): a3:eb:cf:9b:e9:a1:7a:56:23:9c:4f:a8:db:f6:d0:69:be:f4:9a:49:bd:25:8b:41:e3:fa:70:3e:49:79:ab:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate southafricafiduciary.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southafricafiduciary.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a1sport.net
absport.net
ammanaccommodation.com
businessdiversification.com
cambodiafiduciary.com
capetownstory.com
colombiashipping.com
cubafiduciary.com
cypruspalace.com
deutschepress.org
ethicalquestions.org
everytimewesaygoodbyeidiealittle.com
fisheriesprotectionvessel.com
francesport.net
guadalajaraschool.com
ibadanlawyer.com
insearchofhistory.org
interactiveengine.org
internationalesport.net
istanbulsport.net
kanoclinic.com
kingstownfinance.com
logisticslegal.com
maisondesport.net
malaysiasport.net
mauritiusacademy.com
miningsupport.net
offshoreqatar.com
opencharityservice.com
padalarang.org
peacesupport.net
phnompenhaccommodation.com
preforceconcrete.com
reachoutdesign.com
republicsport.net
riskmanagement.io
royalexchangebitcoin.com
saudiarabiafiduciary.com
searchandrescuevessel.com
seychellestime.com
skopjeaccommodation.com
southafricafiduciary.com
southkoreafiduciary.com
stuttgartacademy.com
talesofnarnaia.com
theartistband.com
unitedstatespalace.com
uzbekcompany.com
www.a1sport.net
www.absport.net
www.africapalace.com
www.ammanaccommodation.com
www.apiaaccommodation.com
www.businessdiversification.com
www.caketogo.org
www.cambodiafiduciary.com
www.capetownfinance.com
www.capetownstory.com
www.comeontome.org
www.cubafiduciary.com
www.cypruspalace.com
www.deutschepress.org
www.ethicaldecisions.org
www.fabricstrapping.com
www.firstbecomeeducated.com
www.francesport.net
www.guadalajaraschool.com
www.ibadanlawyer.com
www.insearchofhistory.org
www.interactiveengine.org
www.internationalesport.net
www.istanbulsport.net
www.lacrossedesign.com
www.logisticslegal.com
www.maisondesport.net
www.malaysiasport.net
www.mauritiusacademy.com
www.miningsupport.net
www.nairobiaccommodation.com
www.opencharityservice.com
www.panamagarden.com
www.peacesupport.net
www.phnompenhaccommodation.com
www.polarresearchvessel.com
www.preforceconcrete.com
www.reachoutdesign.com
www.republicsport.net
www.riskmanagement.io
www.royalexchangebitcoin.com
www.saudiarabiafiduciary.com
www.searchandrescuevessel.com
www.skopjeaccommodation.com
www.southafricafiduciary.com
www.southkoreafiduciary.com
www.stuttgartacademy.com
www.talesofnarnaia.com
www.togoclinic.com
www.tradefinancehelp.com
www.unitedstatespalace.com
www.uzbekcompany.com

Other certificates including the domain name southafricafiduciary.com

(limited to 100 certificates)
unitedstatespalace.com
v12sport.net
brazilsport.net
palaisdesport.net
unitedstatespalace.com
www.southkoreafiduciary.com
brazilsport.net
www.spacetransport.net
offshoreqatar.com
www.portofdouala.com
internationalesport.net
www.spacetransport.net
reachoutdesign.com
www.saudiarabiafiduciary.com
maisondesport.net
www.stuttgartacademy.com
www.istanbulsport.net
maisondesport.net
www.t20sport.net
www.mauritiusacademy.com
www.miningsupport.net
www.preforceconcrete.com
republicsport.net
www.maisondesport.net
southafricafiduciary.com
www.peacesupport.net
internationalesport.net
www.furnituretransport.net
saudiarabiafiduciary.com
www.francesport.net
blockchainbankingsystem.org
www.maisondesport.net
offshoreqatar.com
maisondesport.net
www.reliancesport.net
a1sport.net
www.cypruspalace.com
www.absport.net
www.maisondesport.net
www.togoclinic.com

Certificate

The complete raw certificate details for southafricafiduciary.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6byuBG6rTMG5JSizOvp
9DgCUKxjWaHv0s/xc9U2Kf6gBx8XbX2ljO4jxEmlBdgkWMQtLAYvLTX1JmwJyYEW
x7cJxkSN102k2GJRKAizN4e0u0K5khKoUOt7knqwNLRYgS91T6me4TFKEYHwWDYD
8cIcaDpZH2C76y5kHlgseWXT2azkVjhhpMdDYuQik0mpgLKu+5XpYSwE6Uc5P1GX
R8vmKRtVcMFZK5YdgsQ+Mo6z4brPWPhoyvmoVfc0pBDvEaeiHqVqtvcCc6JiPiA0
h9PVvpGik5QWjiHnIfI9+Kymbjq1UfvkzmpNWdp+H2KrOgyyuGmihl7Geq0xJO1O
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298478731212205060852068834784681229741520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 10:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 10:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southafricafiduciary.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22174028555912857120967941105032617764620354081557506096432774155111923729306334782848848108571139575609222170648234722118581385847230933643204363293616128412377256446448799850914010205650160841575399588459407655437632090607421115140907500986790425110483183799633103137447043135924640328802952586073611801867014349199887229191659304174517927997372980115347305566566360441542637455061459402958998342463968452461215174426879454493924456016094532579774492824605827335828632238012889656837654265629692702006240251057831623302287116794417075489246945965658175547584143714044898619855600224749287474760542219769312065703451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7207655ad2f401037753562ab81bbc59014b4db1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1sport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammanaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessdiversification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capetownstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombiashipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypruspalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschepress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethicalquestions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everytimewesaygoodbyeidiealittle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisheriesprotectionvessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guadalajaraschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibadanlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insearchofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactiveengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istanbulsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstownfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logisticslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisondesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysiasport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauritiusacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningsupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshoreqatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opencharityservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padalarang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacesupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnompenhaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preforceconcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachoutdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskmanagement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saudiarabiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchandrescuevessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seychellestime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skopjeaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southafricafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southkoreafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talesofnarnaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartistband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatespalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uzbekcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a1sport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africapalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ammanaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apiaaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessdiversification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caketogo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambodiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetownfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capetownstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comeontome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cubafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypruspalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschepress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethicaldecisions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fabricstrapping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firstbecomeeducated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guadalajaraschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibadanlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insearchofhistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interactiveengine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internationalesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.istanbulsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacrossedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maisondesport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaysiasport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mauritiusacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miningsupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nairobiaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opencharityservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panamagarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peacesupport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phnompenhaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polarresearchvessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preforceconcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reachoutdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.republicsport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskmanagement.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudiarabiafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.searchandrescuevessel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skopjeaccommodation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafricafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southkoreafiduciary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuttgartacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talesofnarnaia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.togoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tradefinancehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedstatespalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uzbekcompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a544687bb0000040300483046022100ef8f48720369e6a63698bb076f5c00bf4c1adb6da920a26fb87acdeccdd9fd60022100967a4a6ff2af8bbec63d5fd976b16481f6b1b6a08b7f28dc861bec9985962fab00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a544687dc0000040300463044022061d245ea210efbfbffa99feeba9925d92cd9e2884caf5010b6a2b754d07ef0af022055076aa103f9bba4b8ad2fd3631d7c637327f7655df69107fdd2390161d5df42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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