traintickets.co.za

Issued by R11

About this certificate

This digital certificate with serial number 03:3b:5c:1a:5e:57:f6:cd:59:66:3f:1d:86:b3:60:3d:3a:e3 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=traintickets.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3b:5c:1a:5e:57:f6:cd:59:66:3f:1d:86:b3:60:3d:3a:e3
Serial Number (int): 281535943332462377896420114306310202014435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:3d:d8:0b:02:c3:7b:85:12:81:09:6f:f4:b8:a8:7e:76:e6:64:c9
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 8b:25:df:89:16:f7:f0:60:2a:fe:68:42:88:7d:fa:7c:8b:e7:e1:97
Fingerprint (sha256): c1:6b:1a:a1:6c:b4:e4:05:17:dd:40:e2:7d:25:f5:d5:9f:68:b0:1a:0d:67:6b:97:55:a3:f9:11:32:db:c3:8c

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate traintickets.co.za

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for traintickets.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aijules.com
alamoheightshomes.net
animatedvideocreations.com
arbitragenews.com
arbitrageq.com
arbitragescores.com
bjh.co.in
bundleandsave.com
californialandscapedesign.com
controlpanelcenter.com
crushedcrete.com
datavata.com
delhibid.com
disastermastersplan.com
dragtravel.com
endeavoreng.store
englishtownhomesforsale.com
erziehungsstelle.com
etexashillcountry.com
fashionmonzter.com
fbcrooks.com
fiftythreeone.com
fiscalzone.com
freelancedao.com
fructosekillsmorepeoplethancarbondioxide.com
ftmorganrealestate.com
galaxyresearch.com
guntrywestvirginia.net
halfmarathonracecalendar.com
highphuctosecornsyrup.com
homelove.com
homeschoolconnection.life
hopefunds.org
houstonprivateschoolsguide.com
huerfanocounty.com
isoladellascala.com
lagostradingcompany.com
lifeismy.com
londonbreastreduction.com
lrbo.es
luxefob.com
mayorkirk.com
modaltownhome.com
mountjulietnazarene.com
nameandform.com
namedd.com
natandchlo.com
oolocal.com
oshishinobu.com
palatialmansions.com
paternitylawyers.com
plagma.com
privatepleasuretraxxx.com
probatebyzipcode.com
promess.co
pureoliveoil.in
rarecollectiblesmarketplace.com
rencontresadulte.ch
repairtrailer.com
roadto50raceseries.com
rodmacquarrie.com
santarosachurch.com
shadi.one
shortcutclubs.com
shrunkenfruitheads.com
slotsnigeria.com
smartfridges.org
soaringsales.com
solarkissimmee.com
southburyrealestate.com
tattnallcounty.com
thecannabisdr.com
thedrjohnsonresearchinstitute.com
thehiddenday.com
traintickets.co.za
trueamericanmediallc.com
tyronza.com
veryfunnylol.com
wagediscrimination.com
wineriesoftexas.com
worldmasterbarbers.com
worrk.com
wvwesleyancovenant.org
www.faithfullyeducatingamerica.com
xykast.org
yankeelake.com

Other certificates including the domain name traintickets.co.za

(limited to 100 certificates)
traintickets.co.za
traintickets.co.za
traintickets.co.za
donnybrookwrestling.com.traintickets.co.za
ateliernovako.ca
norwoodwater.ca
traintickets.co.za
mygrinder.ca
traintickets.co.za
traintickets.co.za
traintickets.co.za
traintickets.co.za

Certificate

The complete raw certificate details for traintickets.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rb3zipP8zGLtrFlp74X
wmNORXrP9bmobfm4sLHH3uyNSyh5/s58abbI1Sxl/tSmSGp+4hrn/i+IvlHnFLhM
WW5sGmml0SlzLJWrR/xwqrhKKpR8ia2Tb3XAtPU0+YCf8pU6NHi9qbPxslwhKsOq
sE+dC1hIftf/zaJmOAfNQ6vWsTI9VLiTVq74HeQhmS6K/UCZa9EFJbqriPVYcq0d
74l1ziwZPI0hFLnBK5xfmmKaFndNACO81u8fuldaiZ8X0z82kxRLVGWWL3sSthuN
5ZHoonasz8oWVxUENdLGa2NsVhjkhIuuivYyBdM6AqnH8oN3LMj1ooDvVIf9nT7H
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281535943332462377896420114306310202014435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 20:55:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 20:55:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'traintickets.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30639894680176614078243097702914003011701188692716199478229102243023892237590126323464132435617657797019601668030951585131777501378032063389697280613603067068599541627270727406936200232068878718532250221636963054768384653633295963595635318822925697553945273455893981066003868439670712613766653647932027769085327402112931211835715717061113506782407291234071140105725179598476844414877193187012134649793327122982744962423290171495197997652117230794241779713535598164473374254227393413125816607200987333280950970885382646997664715577873475973118361995279471529724150098540582569297744903472286462005690949323662406109011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f03dd80b02c37b851281096ff4b8a87e76e664c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1759 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aijules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamoheightshomes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animatedvideocreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragescores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjh.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundleandsave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californialandscapedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlpanelcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crushedcrete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datavata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delhibid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disastermastersplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endeavoreng.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishtownhomesforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erziehungsstelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etexashillcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionmonzter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbcrooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftythreeone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiscalzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelancedao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fructosekillsmorepeoplethancarbondioxide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftmorganrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxyresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guntrywestvirginia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfmarathonracecalendar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highphuctosecornsyrup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homelove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolconnection.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopefunds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonprivateschoolsguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huerfanocounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isoladellascala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagostradingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeismy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonbreastreduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrbo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxefob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayorkirk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modaltownhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountjulietnazarene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nameandform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namedd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natandchlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oolocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshishinobu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palatialmansions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paternitylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plagma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatepleasuretraxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probatebyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promess.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureoliveoil.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarecollectiblesmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rencontresadulte.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repairtrailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadto50raceseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodmacquarrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santarosachurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shadi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortcutclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrunkenfruitheads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotsnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartfridges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soaringsales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarkissimmee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southburyrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattnallcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecannabisdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedrjohnsonresearchinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehiddenday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traintickets.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trueamericanmediallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyronza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veryfunnylol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagediscrimination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineriesoftexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldmasterbarbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvwesleyancovenant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faithfullyeducatingamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykast.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yankeelake.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff4b2b66c00000403004630440220327dcf9eddfaa5feafddc885dfc707edf042e0f6de43ea39368b5d55f694539002201858801bd24926d35ed86191a9fd04999bbf3b4425a0a923f87e25b312690b6a007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff4b2b66800000403004630440220067e8dc0bc70abbe6cc7083abc695ae7da7c2b5c8154a78f9be3134ec1c171cf02206cf78b54c66df83e19f1f7d5946231094f65ec665d90f399e2a75f6e01aa46ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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