plasmatv.co.za

Issued by R10

About this certificate

This digital certificate with serial number 04:ab:ba:52:13:25:36:64:7f:66:fe:65:00:51:c4:97:2a:89 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=plasmatv.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ab:ba:52:13:25:36:64:7f:66:fe:65:00:51:c4:97:2a:89
Serial Number (int): 406885091034393916214120578415634450688649
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d7:25:15:55:35:32:0c:87:83:5e:aa:38:a7:e1:e6:db:13:fa:8e:f5
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 63:ba:dc:01:d8:d9:70:2e:22:42:bb:d1:00:11:49:6b:2b:2b:52:f9
Fingerprint (sha256): c5:1d:09:92:f6:42:24:38:de:70:c8:02:86:3b:0c:7a:fb:b7:e0:f4:46:cc:70:82:92:a9:d7:01:0a:ad:2c:7b

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate plasmatv.co.za

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plasmatv.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activelawyers.com
agarwalsweets.in
allianceibm.org
amusementparkpos.com
aquencha.net
arbitrageatm.com
atticinsulationcompanies.com
bannerexchangenetwork.net
bathroom-heaters.com
bestestate.net
bestofanything.net
blackpilled.news
cadenzarecorder.com
carusobuilders.com
ckl.co.in
cleopatra.in
corphq.com
costellofamily.com
digitalphysicalrealestate.com
disastermasters.org
distinctlymontanagifts.net
dre.chat
dunklincounty.com
easyadsubmitter.com
elkhartrecycling.com
enkoresign.net
federationcalls.statenationals.us
flighthoteldeals.com
flippingequipment.com
fmacres.net
futureinterests.com
gayutopia.net
gfz.in
glutenfreetrial.com
god.app
hardtoppaving.com
hempculture.com
hintfizz.com
hoardingfacts.org
homeandbuy.com
houstonregeneration.com
indianadisposalandrecycling.com
investforvip.com
ipr.associates
itstimetounsugar.com
jesulin.com
jhemp.com
kentuckianahomes.com
ksb-giw.com
lasvegaspsychologist.com
leakingnews.net
leather.bdsmsecurity.com
lesbian8k.com
lgbtqchannel.com
localseoonline.com
memeetings.statenationals.us
nudesexy.com
nusit.com
nutraceuticals.net
ocalawindowcleaner.com
onlinehealthnow.com
parkersburgwvtourism.com
peacetrains.us
peerlesswindows.com
performancecapturestudios.com
pixelworkspromotions.com
plasmatv.co.za
poisonivyexperts.org
raouldns.com
raywintexas.com
republicanvideoeditor.net
ricoattorney.com
rxsugarsleep.com
sacondominiums.net
saintlouisrealestatenews.com
samcaet.com
sanantoniocitymagazine.com
sjt.co.in
sllfx.com
southjordan.net
spaceangeles.com
storeycounty.com
sugarasmedicine.com
tahirburujlimelumenurulhudainvestments.com
texasccwtraining.com
texasnewhomedirectory.com
textnotifications.com
tha.co.in
thaiswe.com
thebarewenchproject.com
traditionrealtygroup.com
tyrochristianpreschool.net
uerotica.com
usedpwc.com
valezi.com
velotermin.at
watermarkfarm.us
womencolorado.com
www.cbgusa.com

Other certificates including the domain name plasmatv.co.za

(limited to 100 certificates)
plasmatv.co.za
www.plasmatv.co.za
plasmatv.co.za
plasmatv.co.za
plasmatv.co.za
plasmatv.co.za
plasmatv.co.za
q8.co.za
plasmatv.co.za
plasmatv.co.za

Certificate

The complete raw certificate details for plasmatv.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAWg2fvxsPtIzaWvMooQ
XMhBXk0Dtufb+LLIp9OoLYQVpbGd4AvfaNNG3k2fJSPRnz2+K+KqcrhlHI4JCUT0
YBbH8eJ7KR5Y5vIbyYmyQwAjtO/98aGPFtfgOu6wJ0Yb5k9c1w8l8Fa4J2MgRRVz
p4TpXsCW+MHjf35Xq4bnHihy7LJfzSl/b8QLhcLdpeXebd6OuswbpJB5b7Fiu/ig
0AqvwI1z/yF4d5KHc+/goRD8PQSP9wKvRtczZ21auV3dKT3qahrMkvbdNFeH349p
vkmMDSpT3cGna8gLB1KEQlkk//osrUB63+vU89PvnhNwhraFIK0u73QoYsyLTRny
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406885091034393916214120578415634450688649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 13:03:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 13:03:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plasmatv.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24745483204425753185367087555303832121665401538469747304767785704657879827116458899143442386897255384162458272970265378401371990584616329980784677043067921059529893079209741756164552626507651373562995061051490784618670943528050459816390115298712734181624584001532194599145869150800542569722565807123282137885659179504431832198886905900017857504153506339924420289368605595414436141919876054539638893298046017047610819571472866130628098290139768046513481998537112439899500531892504042892121538648013880713397635917520145956780358664878105795844077011670988723366694916361556034059223981466082216150163102019331506696831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d725155535320c87835eaa38a7e1e6db13fa8ef5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1943 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activelawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agarwalsweets.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianceibm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amusementparkpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquencha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageatm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atticinsulationcompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerexchangenetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroom-heaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestestate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestofanything.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackpilled.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadenzarecorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carusobuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckl.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleopatra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corphq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costellofamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalphysicalrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disastermasters.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distinctlymontanagifts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dre.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunklincounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyadsubmitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkhartrecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enkoresign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federationcalls.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flighthoteldeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flippingequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmacres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureinterests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayutopia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glutenfreetrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardtoppaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hintfizz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoardingfacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeandbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonregeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianadisposalandrecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipr.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itstimetounsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesulin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentuckianahomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksb-giw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegaspsychologist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leakingnews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leather.bdsmsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesbian8k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localseoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memeetings.statenationals.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudesexy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nusit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutraceuticals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocalawindowcleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinehealthnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkersburgwvtourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacetrains.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peerlesswindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancecapturestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelworkspromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasmatv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyexperts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raouldns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raywintexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanvideoeditor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricoattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarsleep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacondominiums.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintlouisrealestatenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samcaet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniocitymagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjt.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sllfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southjordan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarasmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahirburujlimelumenurulhudainvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasccwtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnewhomedirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textnotifications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tha.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaiswe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebarewenchproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traditionrealtygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrochristianpreschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uerotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedpwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valezi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velotermin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkfarm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womencolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cbgusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019054dbdda4000004030047304502206545fac267e4df0f13efb53f948ccab513794d44aaae2f9e4a93dc9d4d70e810022100f26a59b55a5e5d7d0585de6bfebae7f6fad42584d7426c946f3af79e12ef5412007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000019054dbddad00000403004730450221008f60f1f064b2c32af0c6e6b48e38bbd474c36d25521be91d1a57ce3b967311f3022009abd96d70fd2f23c25369dffaa071c80bbf269fbf0759b20a341ee69894545c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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