key1.omnizant.net

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number b1:29:e4:a5:0c:e0:23:c7:f6:18:e6:da:d8:e6:5e:1d was issued on by Sectigo Limited.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=key1.omnizant.net

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): b1:29:e4:a5:0c:e0:23:c7:f6:18:e6:da:d8:e6:5e:1d
Serial Number (int): 235490876891151273344127929153166401053
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:72:8e:b3:70:e7:3a:7c:12:dc:7b:81:66:04:65:98:5e:6a:05:84
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): b1:93:30:be:45:8d:0f:2b:75:2d:44:d1:a0:a4:23:a6:2f:13:e3:76
Fingerprint (sha256): cb:13:11:1a:fb:18:3a:0a:a6:bb:80:93:ee:8f:a3:2d:cf:bc:b6:2e:8e:84:5d:3f:3a:00:94:95:fb:5f:e2:af

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate key1.omnizant.net

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for key1.omnizant.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

key1.omnizant.net
accreditedmediation.com
aliceweinsteinlaw.com
amclaughlinlaw.com
angerslaw.com
attorneyjeffjones.com
banjokolaw.com
bankruptcylawclinic.net
bbbattys.com
berfondlaw.com
borowsky.com
brianmandellaw.com
calecalaw.com
cameronlawoffice.com
chicagometroweddingjudge.com
christinehubbardlaw.com
conathanlaw.com
conlonlawfirm.com
coraliesfoundation.com
danieljkelleylaw.com
deanvisaoffice.com
dldunnlaw.com
ehill-law.com
elrod-hillfirm.com
ericsappenfield.com
faulk-associates.com
fowlkeslawfirm.com
fuccilaw-adr.com
gabesricelaw.com
galdean.com
gandelot.com
hrzlfirm.com
itrustlaw.com
jptlawchambers.com
kourlesislaw.com
krupplawyer.com
ksalomonelaw.com
llo-law.com
lugerelderlaw.com
lweinerlaw.com
maclaw-llc.com
marathonadvisors.net
masonlawsc.com
mccarthylaw.org
mcllawfirm.com
mcnultylawpc.com
mungerandstone.com
mytaxlaw.com
northshorechild.org
nozhniklaw.com
oneallawyers.com
parkermcmakin.com
pkrlegal.com
pljlaw.com
ppbf.com
randrlegal.com
raymondiryami.com
rbournelaw.com
realestateforeclosurefirm.com
riversidetrustlaw.com
robinslegal.com
rollerlawoffice.com
rosezuckerlaw.com
rossillolicata.com
sawyerlaw.com
seibel-law.com
senkforlaw.com
shandselbert.com
shawlawfirm.net
slonebates.com
socalmedium.com
sreidylaw.com
tewilliamslaw.com
thplaw.net
tlesterlaw.com
valentineandvalentine.com
wardlegalgroup.com
washingtonlaw.net
webblawllc.com
wjhunterlaw.com
www.aliceweinsteinlaw.com
www.brianmandellaw.com
www.campanarolaw.com
www.jqvlaw.net
www.lawsonandbeck.com
www.mccarthylaw.org
www.mcllawfirm.com
www.mungerandstone.com
www.piersonelderlaw.com
www.sandiego-estateplanninglawyers.com
www.sgmblaw.com
www.waypointplanning.com
youngerassociates.net

Other certificates including the domain name omnizant.net

(limited to 100 certificates)
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net
omnizant.net
omnizant.net
key2.omnizant.net
omnizant.net
key1.omnizant.net
omnizant.net

Certificate

The complete raw certificate details for key1.omnizant.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINAzCCC+ugAwIBAgIRALEp5KUM4CPH9hjm2tjmXh0wDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMzEyMTMwMDAwMDBaFw0yNDEyMTIyMzU5NTlaMBwxGjAYBgNVBAMTEWtl
eTEub21uaXphbnQubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
vqeQ6c1K2iRMxbQ20/6a6w7g2G+p+rGgb+gUYG8c1UIGpNib9FfTu4+JNGS+1O8B
o+BBLPwAsvoh6hsBEUt5NXlTN009t1PffEgYEAb4pz36g+cqwWIltJIfI0DMbTEG
GzVv+uE7HrwtsihJ8JABn5LNd9EwSkrriPNq2i/3g/FDiLuNG7NVxpWIHFZLoJQq
bmiCyei7iE7bA2Pu926YN2TiCv95IgUXsjTd/xOOa/XemqurNLqt2lSvDqNhUPFE
kpdzE8qIh0FQIgFuk7GSDM+XGSlbrC9vR/btdE68h6mTGmABdRMlb0PcYZZRQv39
34WDGyneLtxFQReSsP5SLQIDAQABo4IJyjCCCcYwHwYDVR0jBBgwFoAUjYxexFSt
iuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFJtyjrNw5zp8Etx7gWYEZZheagWEMA4G
A1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYIKwYBBQUH
AgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYIKwYBBQUH
AQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp
Z29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUF
BzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTCCAX0GCisGAQQB1nkCBAIEggFt
BIIBaQFnAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGMZKQH
QAAABAMARjBEAiAdCSUrw6l3qgDN36vuPZZjvzfKkNM753Lc4juBxkoYQQIgEl7B
EsdThh7phZWQDDsRClQtIiUUJNtPRopy4PIr1UoAdgA/F0tP1yJHWJQdZRyEvg0S
7ZA3fx+FauvBvyiF7PhkbgAAAYxkpAgVAAAEAwBHMEUCIQDcUmqF+B+9c+zoWUH1
JhRwYJRN7oGOK3rJeDL95UDhQQIgU3s60nBVibY0fttLY0nvvNL/Cyvo/rE97FDW
QGTdCt8AdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYxkpAdr
AAAEAwBHMEUCIGJWF+ZUD35wQf3xCPGKcayu8MpAA9Df1R2dtAN0xeUmAiEA+oYC
G2T7+KrnsFWamQukG02/0ifkFthMbu9dl4V3dhAwggbyBgNVHREEggbpMIIG5YIR
a2V5MS5vbW5pemFudC5uZXSCF2FjY3JlZGl0ZWRtZWRpYXRpb24uY29tghVhbGlj
ZXdlaW5zdGVpbmxhdy5jb22CEmFtY2xhdWdobGlubGF3LmNvbYINYW5nZXJzbGF3
LmNvbYIVYXR0b3JuZXlqZWZmam9uZXMuY29tgg5iYW5qb2tvbGF3LmNvbYIXYmFu
a3J1cHRjeWxhd2NsaW5pYy5uZXSCDGJiYmF0dHlzLmNvbYIOYmVyZm9uZGxhdy5j
b22CDGJvcm93c2t5LmNvbYISYnJpYW5tYW5kZWxsYXcuY29tgg1jYWxlY2FsYXcu
Y29tghRjYW1lcm9ubGF3b2ZmaWNlLmNvbYIcY2hpY2Fnb21ldHJvd2VkZGluZ2p1
ZGdlLmNvbYIXY2hyaXN0aW5laHViYmFyZGxhdy5jb22CD2NvbmF0aGFubGF3LmNv
bYIRY29ubG9ubGF3ZmlybS5jb22CFmNvcmFsaWVzZm91bmRhdGlvbi5jb22CFGRh
bmllbGprZWxsZXlsYXcuY29tghJkZWFudmlzYW9mZmljZS5jb22CDWRsZHVubmxh
dy5jb22CDWVoaWxsLWxhdy5jb22CEmVscm9kLWhpbGxmaXJtLmNvbYITZXJpY3Nh
cHBlbmZpZWxkLmNvbYIUZmF1bGstYXNzb2NpYXRlcy5jb22CEmZvd2xrZXNsYXdm
aXJtLmNvbYIQZnVjY2lsYXctYWRyLmNvbYIQZ2FiZXNyaWNlbGF3LmNvbYILZ2Fs
ZGVhbi5jb22CDGdhbmRlbG90LmNvbYIMaHJ6bGZpcm0uY29tgg1pdHJ1c3RsYXcu
Y29tghJqcHRsYXdjaGFtYmVycy5jb22CEGtvdXJsZXNpc2xhdy5jb22CD2tydXBw
bGF3eWVyLmNvbYIQa3NhbG9tb25lbGF3LmNvbYILbGxvLWxhdy5jb22CEWx1Z2Vy
ZWxkZXJsYXcuY29tgg5sd2VpbmVybGF3LmNvbYIObWFjbGF3LWxsYy5jb22CFG1h
cmF0aG9uYWR2aXNvcnMubmV0gg5tYXNvbmxhd3NjLmNvbYIPbWNjYXJ0aHlsYXcu
b3Jngg5tY2xsYXdmaXJtLmNvbYIQbWNudWx0eWxhd3BjLmNvbYISbXVuZ2VyYW5k
c3RvbmUuY29tggxteXRheGxhdy5jb22CE25vcnRoc2hvcmVjaGlsZC5vcmeCDm5v
emhuaWtsYXcuY29tghBvbmVhbGxhd3llcnMuY29tghFwYXJrZXJtY21ha2luLmNv
bYIMcGtybGVnYWwuY29tggpwbGpsYXcuY29tgghwcGJmLmNvbYIOcmFuZHJsZWdh
bC5jb22CEXJheW1vbmRpcnlhbWkuY29tgg5yYm91cm5lbGF3LmNvbYIdcmVhbGVz
dGF0ZWZvcmVjbG9zdXJlZmlybS5jb22CFXJpdmVyc2lkZXRydXN0bGF3LmNvbYIP
cm9iaW5zbGVnYWwuY29tghNyb2xsZXJsYXdvZmZpY2UuY29tghFyb3NlenVja2Vy
bGF3LmNvbYIScm9zc2lsbG9saWNhdGEuY29tgg1zYXd5ZXJsYXcuY29tgg5zZWli
ZWwtbGF3LmNvbYIOc2Vua2Zvcmxhdy5jb22CEHNoYW5kc2VsYmVydC5jb22CD3No
YXdsYXdmaXJtLm5ldIIOc2xvbmViYXRlcy5jb22CD3NvY2FsbWVkaXVtLmNvbYIN
c3JlaWR5bGF3LmNvbYIRdGV3aWxsaWFtc2xhdy5jb22CCnRocGxhdy5uZXSCDnRs
ZXN0ZXJsYXcuY29tghl2YWxlbnRpbmVhbmR2YWxlbnRpbmUuY29tghJ3YXJkbGVn
YWxncm91cC5jb22CEXdhc2hpbmd0b25sYXcubmV0gg53ZWJibGF3bGxjLmNvbYIP
d2podW50ZXJsYXcuY29tghl3d3cuYWxpY2V3ZWluc3RlaW5sYXcuY29tghZ3d3cu
YnJpYW5tYW5kZWxsYXcuY29tghR3d3cuY2FtcGFuYXJvbGF3LmNvbYIOd3d3Lmpx
dmxhdy5uZXSCFXd3dy5sYXdzb25hbmRiZWNrLmNvbYITd3d3Lm1jY2FydGh5bGF3
Lm9yZ4ISd3d3Lm1jbGxhd2Zpcm0uY29tghZ3d3cubXVuZ2VyYW5kc3RvbmUuY29t
ghd3d3cucGllcnNvbmVsZGVybGF3LmNvbYImd3d3LnNhbmRpZWdvLWVzdGF0ZXBs
YW5uaW5nbGF3eWVycy5jb22CD3d3dy5zZ21ibGF3LmNvbYIYd3d3LndheXBvaW50
cGxhbm5pbmcuY29tghV5b3VuZ2VyYXNzb2NpYXRlcy5uZXQwDQYJKoZIhvcNAQEL
BQADggEBAJSvwcoRmxSf8GvmQWSnAqZ7jWaKwaklrmwHnwHQ1KYE8TUoPDByJHgE
XxUJxvQFqxEdhZlxrz50MrvC+zT5BdXjTUW5xdUgVfJXA5/joT9Iq3kaLj0zJM1B
X/ZBcraJRIjr+7XfpXwN1J2eRZqnNR7Y8zF0kQulqCw4hw3iHjtw9TniQpft7LWA
xm9s0hJdt4K1atY49FjO12CaBlXLJV5RPOpJNAhEBOT6jZuF3IorkissSjX+98/A
rU7WoJNr5DyRMYqEzWhhb8YhtLbC0zTexB8ZuE+bMfmdstEoxRZFLCLwiopINESK
iqgNBAzawdLk5gZnymXrwGGBDEliszY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqeQ6c1K2iRMxbQ20/6a
6w7g2G+p+rGgb+gUYG8c1UIGpNib9FfTu4+JNGS+1O8Bo+BBLPwAsvoh6hsBEUt5
NXlTN009t1PffEgYEAb4pz36g+cqwWIltJIfI0DMbTEGGzVv+uE7HrwtsihJ8JAB
n5LNd9EwSkrriPNq2i/3g/FDiLuNG7NVxpWIHFZLoJQqbmiCyei7iE7bA2Pu926Y
N2TiCv95IgUXsjTd/xOOa/XemqurNLqt2lSvDqNhUPFEkpdzE8qIh0FQIgFuk7GS
DM+XGSlbrC9vR/btdE68h6mTGmABdRMlb0PcYZZRQv3934WDGyneLtxFQReSsP5S
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 235490876891151273344127929153166401053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'key1.omnizant.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24067907851111097232814689868365709147606177934128092281446989505644367164497352846385524692028259357035314006831110999333095575620433122161495908551918473717419942380219975373577096987742596188096555104980232614295265486991148887587095900413715194927781298424447227971670413261446461014844960445821138860288913911761490399518876751324009640226979274474982912289630616055332988463806543448752067482617007485836166425379116929954433844561141711758643135277270813241099866631649479236423237192316237179103342460232812474407760267395808322114324869067718791402952104938492687107191960542680243838952447353226332204847661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b728eb370e73a7c12dc7b81660465985e6a0584
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'key1.omnizant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accreditedmediation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliceweinsteinlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amclaughlinlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angerslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attorneyjeffjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banjokolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcylawclinic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbbattys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berfondlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borowsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianmandellaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calecalaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameronlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagometroweddingjudge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christinehubbardlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conathanlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conlonlawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coraliesfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danieljkelleylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanvisaoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dldunnlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehill-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elrod-hillfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ericsappenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faulk-associates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fowlkeslawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuccilaw-adr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabesricelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galdean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandelot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrzlfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itrustlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jptlawchambers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kourlesislaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krupplawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksalomonelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llo-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lugerelderlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lweinerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maclaw-llc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonadvisors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masonlawsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccarthylaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcllawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnultylawpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mungerandstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytaxlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorechild.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nozhniklaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneallawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkermcmakin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pljlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppbf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randrlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raymondiryami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbournelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateforeclosurefirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riversidetrustlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinslegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollerlawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosezuckerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossillolicata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sawyerlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seibel-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senkforlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shandselbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shawlawfirm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slonebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socalmedium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sreidylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewilliamslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thplaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlesterlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valentineandvalentine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardlegalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webblawllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wjhunterlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliceweinsteinlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianmandellaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campanarolaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jqvlaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawsonandbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccarthylaw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcllawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mungerandstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piersonelderlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiego-estateplanninglawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgmblaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waypointplanning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngerassociates.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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