support.ashfieldgroup.com

Issued by R3

About this certificate

This digital certificate with serial number 03:df:27:55:78:97:fd:15:97:a1:be:14:d7:37:66:79:c0:fa was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=support.ashfieldgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:27:55:78:97:fd:15:97:a1:be:14:d7:37:66:79:c0:fa
Serial Number (int): 337272109301649535260438249110499891986682
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:5d:82:da:6e:b7:f6:e1:b5:34:69:a2:09:e0:1f:3a:d7:24:cd:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:ec:d1:cf:a2:75:20:ef:af:67:ee:81:7f:6f:2b:26:c5:18:bb:f1
Fingerprint (sha256): 21:48:ee:5e:41:cf:c6:58:65:be:0a:17:ba:99:67:ca:a0:38:4b:cf:88:8a:7c:58:be:96:be:6c:51:9a:ea:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.ashfieldgroup.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.ashfieldgroup.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adminsupport.accessy.se
ahecs.groupgti.com
atbalsts.smiltene.lv
atencioncliente.domesticoshop.com
aurataskgenie.weareaura.com
ayuda.primor.eu
c19toolkit.thomsonscreening.com
community.fairaway.de
contact.discfactor.nl
desk.cs.zohohost.eu
desk.exceedoutsourcing.co.uk
desk.jumbocopy.es
desk.ladina.lt
desk.lensenergie.nl
deskdemo.cloudperfect.co.uk
help.dozeninvestments.com
help.enforcer.bg
help.gammacad.pl
help.papadakisbros.com
help.sabicom.com
help.tikapi.io
helpdesk.auditprogramm.de
helpdesk.awork.dk
helpdesk.complianceplattform.de
helpdesk.plexusbusiness.co.uk
helpdesk.spider4web.it
helpdesk.thefortsystem.com
hilfe.nasenblick.de
internal.fxr-insights.com
itservices.crelsolutions.co.uk
oss.conversationalcitizen.com
partners.scb-global.com
provisioning.scb-global.com
quojob.dataline.eu
sai360helpdesk.naturalpower.com
sat.serviciosit.es
service.chantraine.de
service.goldengates.de
sirius-support.ntvd.co.uk
soporte.aodatacloud.es
soporte.mengual.com
soporte.wecomm.es
staff.ekapro.it
support-gifi.gekko.fr
support.13i.fr
support.acui.fr
support.advizetech.com
support.ashfieldgroup.com
support.awup.org
support.capitalfinancialmarkets.co.uk
support.cdsca.gr
support.cod4is.com
support.confores.consulting
support.consultus.group
support.dataroad.pt
support.dnatechlondon.co.uk
support.easee.energy
support.erpsystemconsulting.co.uk
support.foys.tech
support.fxopen.com
support.gea.bio
support.holo-light.com
support.iblu.it
support.kids4yoga.de
support.licensepartners.nl
support.logyx.fr
support.musthavetickets.co.uk
support.myc4p.com
support.mydandatravel.com
support.noriconsultancy.co.uk
support.onetap.online
support.oohav.co.uk
support.petbase.eu
support.rcs.eu.com
support.retec-regenwassertechnik.de
support.ripplesuicideprevention.com
support.solidweb.pt
support.spitzen-praevention.com
support.tactick.nl
support.therockfish.co.uk
support.tycloud.bzh
support.uppertree.de
support.virtualfirst.uk
support.webandappstudio.ch
support.webandappstudio.de
support12.e-dialog.at
support3.cdbnet.de
transnet-wecare.1anab.de
websupport.porttechnology.org
www.ettore-emea.com

Other certificates including the domain name ashfieldgroup.com

(limited to 100 certificates)
ashfieldgroup.com
ashfieldgroup.com
people.yourchildcarebusiness.com
support.ashfieldgroup.com
sni.cloudflaressl.com
ashfieldgroup.com
support.consultus.group
support.consultus.group
ashfieldgroup.com
billing.spondeosolutions.com
ashfieldgroup.com
ashfieldgroup.com

Certificate

The complete raw certificate details for support.ashfieldgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfD1xOL2NOXkAgBp3zAJmFGVZXmrF
vSy6fzYsaIPDfzX2VFw7sSK9PhLqCce5oStvLe385w1KzhFWrUNAOUg4BA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337272109301649535260438249110499891986682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 13:57:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 13:57:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.ashfieldgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047c3d7138bd8d397900801a77cc02661465595e6ac5bd2cba7f362c6883c37f35f6545c3bb122bd3e12ea09c7b9a12b6f2dedfce70d4ace1156ad434039483804
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf5d82da6eb7f6e1b53469a209e01f3ad724cd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminsupport.accessy.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahecs.groupgti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbalsts.smiltene.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atencioncliente.domesticoshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurataskgenie.weareaura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.primor.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c19toolkit.thomsonscreening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.fairaway.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.discfactor.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.cs.zohohost.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.exceedoutsourcing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.jumbocopy.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.ladina.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.lensenergie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deskdemo.cloudperfect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.dozeninvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.enforcer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.gammacad.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.papadakisbros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sabicom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.tikapi.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.auditprogramm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.awork.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.complianceplattform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.plexusbusiness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.spider4web.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.thefortsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilfe.nasenblick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.fxr-insights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.crelsolutions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss.conversationalcitizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.scb-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provisioning.scb-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quojob.dataline.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sai360helpdesk.naturalpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sat.serviciosit.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.chantraine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.goldengates.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirius-support.ntvd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.aodatacloud.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.mengual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.wecomm.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.ekapro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-gifi.gekko.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.13i.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.acui.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.advizetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ashfieldgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.awup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.capitalfinancialmarkets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cdsca.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cod4is.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.confores.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.consultus.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dataroad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dnatechlondon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.easee.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.erpsystemconsulting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.foys.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fxopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gea.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.holo-light.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.iblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kids4yoga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.licensepartners.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.logyx.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.musthavetickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myc4p.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mydandatravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.noriconsultancy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.onetap.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.oohav.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.petbase.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rcs.eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.retec-regenwassertechnik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ripplesuicideprevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.solidweb.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.spitzen-praevention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tactick.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.therockfish.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tycloud.bzh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.uppertree.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.virtualfirst.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.webandappstudio.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.webandappstudio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support12.e-dialog.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support3.cdbnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transnet-wecare.1anab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websupport.porttechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ettore-emea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ce993edde00000403004730450220716236c6a42e6fe064e821670e22504aac294ade05e7639acdac99acaff411c2022100e914fe81781fe27e60797feeae09752563882a5f5fe2099e458df92affe69b7000750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ce993eecd0000040300463044022029571c06ffcaf2e503684b7202cde6b478eff0ee457be15dd5bc11efc650f21b022064c7f220453a3ba16cee5bf8959b38935eaf4165ab6edcd36f146bd3ed1de02a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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