alexanderforbes.randgolive.dev

Issued by R3

About this certificate

This digital certificate with serial number 03:a5:e7:62:3f:6b:b4:7e:cf:ca:3f:22:ae:b5:6c:a3:04:b3 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alexanderforbes.randgolive.dev

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:e7:62:3f:6b:b4:7e:cf:ca:3f:22:ae:b5:6c:a3:04:b3
Serial Number (int): 317791010135679117417840172187810992948403
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:30:fd:c1:90:40:49:49:e8:1a:1a:c4:fa:d3:91:af:ca:24:a8:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:d0:eb:68:12:f3:c7:ae:a2:1c:de:51:8f:26:c9:70:1d:ac:09:97
Fingerprint (sha256): d0:55:20:e0:c8:5f:27:b7:bb:ff:d0:c6:3a:92:a5:99:65:b8:be:cb:5e:a8:33:fc:4b:f1:1d:78:2c:bc:5e:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate alexanderforbes.randgolive.dev

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alexanderforbes.randgolive.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alexanderforbes.randgolive.dev
alwayshealth.co.za
amavaluehealth.co.za
amavaluehome.co.za
amavaluetech.co.za
apinew.directrewards.co.za
apitest.randgolive.dev
bidvest.randgolive.dev
cellchealthassist.co.za
cellchomeassist.co.za
cellcsafetyassist.co.za
cellctechassist.co.za
compendium.randgolive.dev
coupons.fedgroupmall.co.za
coupons.tendopro.co.za
dealsontap.randgolive.dev
dhlyellowrewards.randgolive.dev
dialaguard.co.za
dialaguard.randgolive.dev
dreamrewards.co.za
dreamrewards.randgolive.dev
emobile.randgolive.dev
emobilecoupons.co.za
extremelifestyle.co.za
fedgroup.randgolive.dev
firsthealth.co.za
firsthealth.randgolive.dev
guard247.co.za
guard247.randgolive.dev
homeangel.co.za
homeangel.randgolive.dev
icebolethu.randgolive.dev
images.iingxoxo.com
jetclubcoupons.co.za
justrewards.randgolive.dev
learnright.co.za
lekelela.gooutbound.co.za
mall.1callassist.co.za
mccrystal.randgolive.dev
mihandyman.co.za
mihandyman.randgolive.dev
morebuy.randgolive.dev
morebuyonline.co.za
motorhappy.randgolive.dev
mydiscountsonline.co.za
mytechbuddy.co.za
mytechbuddy.randgolive.dev
mytechzone.co.za
mytechzone.randgolive.dev
nedbank.mycoupons.co.za
oneloyaltymall.co.za
onespark.randgolive.dev
portal.sadealz.co.za
qa.extremelifestyle.co.za
randgopartnersmall.randgolive.dev
ravens.randgolive.dev
sadealz.randgolive.dev
saveonhealth.co.za
teljoyrewards.co.za
test1.randgolive.dev
test2.randgolive.dev
test3.randgolive.dev
test4.randgolive.dev
test5.randgolive.dev
tfgclub.randgolive.dev
tfgclubcoupons.co.za
tfgfitlifecoupons.co.za
tfgmykitchencoupons.co.za
tfgsoccerclubcoupons.co.za
tfgsportsclubcoupons.co.za
werksmans.randgolive.dev
www.alwayshealth.co.za
www.cellchealthassist.co.za
www.cellchomeassist.co.za
www.cellcsafetyassist.co.za
www.cellctechassist.co.za
www.dreamrewards.co.za
www.extremelifestyle.co.za
www.genesisbrokersmall.co.za
www.guard247.co.za
www.homeangel.co.za
www.learnright.co.za
www.morebuyonline.co.za
www.mydiscountsonline.co.za
www.mytechbuddy.co.za
www.oneloyaltymall.co.za
www.saveonhealth.co.za
www.teljoyrewards.co.za
www.tfgclubcoupons.co.za
www.tfgfitlifecoupons.co.za
www.tfgmykitchencoupons.co.za
www.tfgsoccerclubcoupons.co.za
www.tfgsportsclubcoupons.co.za
www.yourquicksure.co.za
yourquicksure.co.za

Other certificates including the domain name randgolive.dev

(limited to 100 certificates)
alexanderforbes.randgolive.dev
api.iingxoxo.com
crm.iingxoxo.com
crm.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
alexanderforbes.randgolive.dev
api.iingxoxo.com
alexanderforbes.randgolive.dev
api.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
api.iingxoxo.com
api.iingxoxo.com
crm.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
crm.iingxoxo.com

Certificate

The complete raw certificate details for alexanderforbes.randgolive.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV4kS1yOGJMXnXLp79GQ
9Dp/CTywS7O5+BHxKo0xmjqSvf7SDMf0Q59liwoF5a/8f4dfgNDdz13zRIGR109Y
9t7X4g0mmXXgbK0fWeiGa0CLRSRvRU88BFbZ3dk0OWy3UBWU60NS4Qufaf/uMewV
Ovp+H12e3MwkapezB91Ii7mdGWk+A+ljI8khjGHxwk5T5qGclFnIroKqwQoTVnqb
WRADmGVRNHUrn6RslDVheIYnLW4h/n1+FXFoTys8W97f/1EoE4cQMy1ogzad7/Y5
ejVxIxbMFZjsxFMJUoVHL7lIIRyvsYtHWbqUBXoBmmEw3ej7la6bpo1BmYnH9eP5
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317791010135679117417840172187810992948403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 14:05:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 14:05:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alexanderforbes.randgolive.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16836117599912127690916135402566774495825588923312478327117146163778190825306630474683247872845522044416091434124057679672129521747387000253056417964790710211124817419097771348388475843921801916254770579163964522997782982977070329424236944936436964370364867922509049674267597862250764095545356527074282444282519055301952823682320806399486108010198333072952192840712470094215320616297322154834371302758295419738086226794344604846545697202930465316348777975309549625582971326355328927235218098451743610772513003705307202866791594730016180135099921271908519691209004414789274627008185176880159636120031263023428943477147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6530fdc190404949e81a1ac4fad391afca24a864
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexanderforbes.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwayshealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavaluehealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavaluehome.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amavaluetech.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apinew.directrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apitest.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvest.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellchealthassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellchomeassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellcsafetyassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellctechassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupons.fedgroupmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupons.tendopro.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealsontap.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhlyellowrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialaguard.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialaguard.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emobile.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emobilecoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremelifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedgroup.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthealth.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guard247.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guard247.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeangel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeangel.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icebolethu.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iingxoxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnright.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekelela.gooutbound.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.1callassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccrystal.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mihandyman.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mihandyman.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morebuy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morebuyonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorhappy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiscountsonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechbuddy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechbuddy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechzone.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechzone.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedbank.mycoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneloyaltymall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onespark.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.sadealz.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.extremelifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randgopartnersmall.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravens.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadealz.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saveonhealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teljoyrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test4.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test5.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgclub.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgfitlifecoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgmykitchencoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgsoccerclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfgsportsclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werksmans.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alwayshealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellchealthassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellchomeassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellcsafetyassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellctechassist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extremelifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesisbrokersmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guard247.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeangel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnright.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morebuyonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydiscountsonline.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytechbuddy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneloyaltymall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saveonhealth.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teljoyrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgfitlifecoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgmykitchencoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgsoccerclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfgsportsclubcoupons.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourquicksure.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourquicksure.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf90ea01e0000040300463044022064e0221bfc917abb3e4cf690c4590a5de6c65bead56fee72e1c24c2b199bcded0220579b9f2b9ef049406ccae5666faaaa2edf01b6a6f3c4113e35bf8c8efa4a54780076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf90ea2180000040300473045022078b5792ff2087d1dd8087f928e0754b0ece0125a3b49de9a5793e7337b8cd405022100e38c6ea732b3f5ade24aa5a98f4d597b06cfaa3945ae7b50684a39b1cb168d30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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