crm.iingxoxo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:65:3d:ba:19:8a:a6:40:e7:e4:87:a6:56:e0:c0:ac:ce was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crm.iingxoxo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:65:3d:ba:19:8a:a6:40:e7:e4:87:a6:56:e0:c0:ac:ce
Serial Number (int): 421744425147277203620387592521418341919950
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:f6:98:07:2f:19:3b:5f:d8:89:3d:4c:8f:ca:95:2c:68:95:c4:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:6f:48:12:85:72:ba:3c:94:0b:09:59:80:93:a0:17:29:46:0c:ca
Fingerprint (sha256): ed:7b:40:db:64:ac:37:83:2c:e2:59:42:e7:14:61:d4:03:19:8f:50:65:3c:08:53:dc:58:24:53:97:db:99:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crm.iingxoxo.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.iingxoxo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accisure.randgolive.dev
alumnimallrandgo.up.ac.za
api.iingxoxo.com
atlanticfuneralservices.randgolive.dev
avbob.randgolive.dev
b4b.alexanderforbes.co.za
bespoke.randgolive.dev
bluerewards.clientele.co.za
blutrain.randgolive.dev
clientelerewards.randgolive.dev
clubmccarthylifestylemall.co.za
coupons.edgarsclub.co.za
crm.iingxoxo.com
dhl.randgolive.dev
directrewards.randgolive.dev
discountrewards.randgolive.dev
edgars.randgolive.dev
everydayrewards.avbob.co.za
ewill.online
ewill.randgolive.dev
fedgroupmall.co.za
futurewise.randgolive.dev
gohappymall.motorhappy.co.za
helivacrewards.randgolive.dev
increasebenefits.randgolive.dev
lifestyleassist.riseupcare.co.za
limitlessfinancialservices.randgolive.dev
mccrystalinsurancebrokers.co.za
members.save247.co.za
mhgohappy.randgolive.dev
mhrenewtech.randgolive.dev
mhserviceplan.randgolive.dev
mhwarrantee.randgolive.dev
mobientertainment.randgolive.dev
motorcompmall.motorhappy.co.za
motorhappydrive.randgolive.dev
motus.randgolive.dev
mtnmomo.randgolive.dev
mtnmomorewards.randgolive.dev
mustek.randgolive.dev
offers.directrewards.co.za
onepager.randgolive.dev
onepagerproject.randgolive.dev
pioneerrewards.randgolive.dev
pple.randgolive.dev
ppleisaverewards.com
renewtechmall.motorhappy.co.za
rewards.alexforbes.com
rewards.bespokeholdings.co.za
rewards.helivac.co.za
rewards.pioneergroup.co.za
riseupcarelifestyle.randgolive.dev
samambu.randgolive.dev
save247.randgolive.dev
save247lifestyle.co.za
servicemall.motorhappy.co.za
stillwater.randgolive.dev
test6.randgolive.dev
totalbenefitsolutions.randgolive.dev
twomountains.randgolive.dev
universityofpretoria.randgolive.dev
unlocked.mtnmomorewards.co.za
warrantymall.motorhappy.co.za
werksmansmall.co.za
www.blutrainrewards.com
www.clubmccarthylifestylemall.co.za
www.discountrewards.co.za
www.fedgroupmall.co.za
www.lifestyleassist.futurewise.co.za
www.mccrystalinsurancebrokers.co.za
www.musteksamsungrewards.co.za
www.primerewards.co.za
www.rewards.atlantic-funerals.co.za
www.save247lifestyle.co.za
www.werksmansmall.co.za

Other certificates including the domain name iingxoxo.com

(limited to 100 certificates)
alexanderforbes.randgolive.dev
iingxoxo.com
api.iingxoxo.com
crm.iingxoxo.com
crm.iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
crm.iingxoxo.com
alexanderforbes.randgolive.dev
iingxoxo.com
api.iingxoxo.com
alexanderforbes.randgolive.dev
api.iingxoxo.com
iingxoxo.com
iingxoxo.com
crm.iingxoxo.com
alexanderforbes.randgolive.dev
iingxoxo.com
alexanderforbes.randgolive.dev
crm.iingxoxo.com
api.iingxoxo.com
api.iingxoxo.com
iingxoxo.com
crm.iingxoxo.com
iingxoxo.com
iingxoxo.com
alexanderforbes.randgolive.dev
alexanderforbes.randgolive.dev
iingxoxo.com
crm.iingxoxo.com
crm.iingxoxo.com

Certificate

The complete raw certificate details for crm.iingxoxo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhZwZ670gkcA45lV+JvJ
3RQTK9vYdkk2dXQ9VTkoLMQeIlqSFel02bgdmuMxdOGgHQqmvzicgTdwawLwH2WN
6JQ5ZuJkyIfguHjEK3zivPkN9xKe5M6WBn2y2SxJqYBbzVkAzjJynURyqfIECCE0
9oaRdypIbNKN6vpm9bhGZcHmTFJR4VnODBVM5qKQmyxTJC0uuQ90MUxG5J68qFJc
Up9WRJHlK5dAZqCpQ7pTPCSWf7Df+/iGLHrzRfkuYp36Z4kmPQkomdsxXIfqUnb4
iEmJ82fto+n5vOKa5fn9wUwsZpjahx6fjTTfaFTNQsPyyzdKOk1KrzyFnRqIQVk5
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421744425147277203620387592521418341919950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 13:24:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-08 13:24:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.iingxoxo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26016155946786216943717275378838637692872435449138881133140385296226104209326290542744027493072475789668149875128611878351869723540707225677639104666067403229884248555889928546001748622688283053099038357972165980379718264645420612060777025098937699089739336059608430193457785863584220819762430720889056116740681393537521401001064022060123414367077429084119917628195505270850810922470425479285729003595175149809143802525726950329005051232622168935464336015364006483669722112245450894410787858990025164758024616664390292539571082099472132722021911388363904389426680222861230080052445668359678156863183095962685408885167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2f698072f193b5fd8893d4c8fca952c6895c418
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accisure.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnimallrandgo.up.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.iingxoxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticfuneralservices.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avbob.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b4b.alexanderforbes.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespoke.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerewards.clientele.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blutrain.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientelerewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmccarthylifestylemall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupons.edgarsclub.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.iingxoxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhl.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgars.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydayrewards.avbob.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewill.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewill.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedgroupmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurewise.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gohappymall.motorhappy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helivacrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'increasebenefits.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifestyleassist.riseupcare.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limitlessfinancialservices.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccrystalinsurancebrokers.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.save247.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhgohappy.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhrenewtech.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhserviceplan.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhwarrantee.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobientertainment.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorcompmall.motorhappy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorhappydrive.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motus.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtnmomo.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtnmomorewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustek.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.directrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepager.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepagerproject.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerrewards.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pple.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppleisaverewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewtechmall.motorhappy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.alexforbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.bespokeholdings.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.helivac.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewards.pioneergroup.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riseupcarelifestyle.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samambu.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'save247.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'save247lifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicemall.motorhappy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillwater.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test6.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalbenefitsolutions.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twomountains.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityofpretoria.randgolive.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlocked.mtnmomorewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrantymall.motorhappy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werksmansmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blutrainrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubmccarthylifestylemall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discountrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fedgroupmall.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifestyleassist.futurewise.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccrystalinsurancebrokers.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musteksamsungrewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primerewards.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rewards.atlantic-funerals.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.save247lifestyle.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werksmansmall.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d891ac2790000040300483046022100a5eb65548378de8e1b1741c4e2e86b780f7fcd072f3bdb5654f8be106f9be016022100e2a564903e21699c272dc342132f617270cc0f9d0589959776b33573533bf97e00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d891ac2e000000403004830460221009d0c7ad994ebd88263f90d766469e2b5e364b8d9369f873b2963d7153a9832b3022100f98d1d0678ec12456294e2e671443d49048e437701b3d5a41f9f4d860b9b5623
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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