surveysouthafrica.com

Issued by R3

About this certificate

This digital certificate with serial number 04:69:93:7e:4b:14:f7:ff:07:20:7b:0f:b0:db:2b:da:f1:79 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=surveysouthafrica.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:69:93:7e:4b:14:f7:ff:07:20:7b:0f:b0:db:2b:da:f1:79
Serial Number (int): 384374844521366117903074157472287217611129
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:ab:f2:52:30:d0:88:1b:08:19:24:40:76:1d:72:c6:f2:5f:99:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f0:50:f1:b1:22:60:61:78:10:00:15:bb:35:31:9d:06:01:a0:ae:c8
Fingerprint (sha256): d2:35:43:63:1d:e7:8f:bb:a2:82:e2:3f:93:33:fe:d5:d4:a0:64:62:b7:8e:4d:5b:a5:6e:de:1c:c6:a5:d1:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate surveysouthafrica.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for surveysouthafrica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

40radio.com
aicountryclub.com
aitop10.com
angolaoil.org
bahamasfinance.org
bitcoingram.org
bitcoinmonaco.org
blockchainplc.org
cheapschoolbackpack.com
disruptivebank.org
edmontonsalon.com
financecamera.com
financeindustry.cc
freight39.com
guamfinance.com
guernseyfinance.org
havanadrama.com
horizonsa.com
hyderabadclinic.com
iltrading.org
indemnityagreement.org
khargisland.org
kiribatifinance.com
litdb.org
loosegroup.com
movieworldguide.com
offshorearab.com
panamacityemployment.com
panamasilver.com
parissaintgermain.org
propertypatent.com
reykjavikfinance.com
romanvilla.com
societedata.com
subnotebook.org
subseaconstruction.net
subseagold.net
summitai.org
surveysouthafrica.com
tanzaniaart.com
thairath.org
tirunelvelifinance.com
txschoolhealth.com
undividedfood.com
untamedarchaeology.org
vegandosa.org
worldhydrogen.org
www.40radio.com
www.abhyudayayoga.org
www.aicountryclub.com
www.aitop10.com
www.allyouneedisyoga.org
www.bahamasfinance.org
www.bitcoingram.org
www.bitcoinmonaco.org
www.blockchainplc.org
www.capitalwashingtondc.com
www.cheapschoolbackpack.com
www.disruptivebank.org
www.dusseldorffair.com
www.edmontonsalon.com
www.faisalabadlawyer.com
www.financecamera.com
www.financeindustry.cc
www.freelancela.com
www.freight39.com
www.guernseyfinance.org
www.guiria.org
www.havanadrama.com
www.horizonsa.com
www.iltrading.org
www.kiribatifinance.com
www.libyaclinic.com
www.lisbonemployment.com
www.litdb.org
www.maduraifinance.com
www.mappingtechnique.org
www.moscowcollege.com
www.newoffshorerealty.com
www.newrefi.org
www.offshorearab.com
www.panamacityemployment.com
www.parissaintgermain.org
www.propertypatent.com
www.reykjavikfinance.com
www.rmpa.com
www.romanvilla.com
www.schoolofsongwriting.com
www.serbiasilver.com
www.societedata.com
www.stuttgartbank.com
www.subnotebook.org
www.subseaseismic.net
www.thairath.org
www.tirunelvelifinance.com
www.untamedarchaeology.org
www.vegandosa.org
www.westminstermouthpiece.com
www.worldhydrogen.org

Other certificates including the domain name surveysouthafrica.com

(limited to 100 certificates)
www.edmontonsalon.com
www.worldhydrogen.org
romanticalexandria.com
surgeryoffshore.com
www.offshorearab.com
japdata.com
www.kazakhstanrepublic.com
californiabookstore.com
surveysouthafrica.com
www.singapurbusiness.com
summitai.org
alittleprincess.org
undividedfood.com
txschoolhealth.com
surgeryoffshore.com
www.offshorearab.com
www.havanadrama.com
romanticalexandria.com
surgeryoffshore.com
surgeryoffshore.com
www.energychief.org
surgeryoffshore.com
surveysouthafrica.com
havanadrama.com
www.blockchainplc.org
www.europeoiltrading.org
www.stuttgartbank.com
myafricanhistory.com
surveysouthafrica.com
offshorearab.com

Certificate

The complete raw certificate details for surveysouthafrica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB5jmy6o9XO17K/eUD0o
kTfiq3abIId9XlKUHDTOcqSOez/9fCEC8yFcZ5oYaYUfIDncH/5IDLFnFis2g4/g
yxUaYxbFcGEdQM0Y35qIcUHGJnCpGVzQHIpzF6fHMbhYYYyLFRfdLbv5dBC98h6E
LVo8hpWieEKGTnFOPww+oFJPBq22+mRPlE5HBrpq0eeEnFw939AUadm3N4+s+aie
YaAKBQ0daei5DT7eSh6FAC1A8Mk4UmKuauYQc7FW3EmreTrCjBxIaUmQ6RtpAJOa
UdS4qW8x8W7hZH5VE8DR64fVl7WPghEsoHZ4rb/d6eD8exLtgqKtNQckEY8My0QH
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384374844521366117903074157472287217611129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-02 10:35:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 10:35:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'surveysouthafrica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23242833530892820561020482636575694637575882169151539356885225208654619465013444196741709861900009411797808779099849126109271808330402871130650408534457002351062965178882134359122381624353191069676259410211191869184022106944874602192658162148463991608648673611382188751503814288554125745532250192000691025699766828019554895064421733355195561724355297419875955911203725254517422476104952848829027683483365983738711046569731449633449673313742004706082046344324746357931366703072804348421612383407011890718809061776762673044956346437045105289251743090723486428871572081366211051443174464553323604499923265085220445226853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfabf25230d0881b08192440761d72c6f25f99ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2071 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aicountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitop10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angolaoil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahamasfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoingram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinmonaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainplc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapschoolbackpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disruptivebank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmontonsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financecamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeindustry.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight39.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guamfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guernseyfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havanadrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horizonsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyderabadclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnityagreement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khargisland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiribatifinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litdb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loosegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieworldguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshorearab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamacityemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamasilver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parissaintgermain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertypatent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavikfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romanvilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'societedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subnotebook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subseaconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subseagold.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summitai.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveysouthafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanzaniaart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thairath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tirunelvelifinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txschoolhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undividedfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'untamedarchaeology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegandosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldhydrogen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.40radio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abhyudayayoga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aicountryclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aitop10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allyouneedisyoga.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bahamasfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoingram.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bitcoinmonaco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blockchainplc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalwashingtondc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapschoolbackpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.disruptivebank.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dusseldorffair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edmontonsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faisalabadlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financecamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financeindustry.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freight39.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guernseyfinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guiria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havanadrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iltrading.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiribatifinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libyaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lisbonemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.litdb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maduraifinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mappingtechnique.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moscowcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newoffshorerealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newrefi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offshorearab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panamacityemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parissaintgermain.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertypatent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reykjavikfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romanvilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolofsongwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serbiasilver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.societedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stuttgartbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subnotebook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subseaseismic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thairath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tirunelvelifinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.untamedarchaeology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegandosa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westminstermouthpiece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldhydrogen.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001891663502b000004030047304502210084366bbd3f3f53ef0b833010a6d7895cc023ff9e57d3e3b5db39f495b877e1550220458ed40839ce5fcb02bc7283f97d74d476cced9aa5de177774d1a589a79d39f6007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018916635024000004030047304502201db3d606f14ab112f5ede6cfc970af3cf89c1b055dcac3263635eef8301cf4a60221008238146e2db5a7556fdd3b2f1da89a0a68408a787d3e393d81919c5753034231
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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