helpdesk.kentik.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:37:26:9c:41:9a:34:10:89:f5:c9:83:06:90:9a:7c:5b was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=helpdesk.kentik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:37:26:9c:41:9a:34:10:89:f5:c9:83:06:90:9a:7c:5b
Serial Number (int): 380168711866990510751894683724199642168411
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:26:84:0b:80:fd:97:ad:db:9d:57:13:87:7a:16:9e:c1:db:e5:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:a8:af:3b:3f:87:18:c0:93:27:f8:30:2d:b3:71:bb:8f:5c:18:42
Fingerprint (sha256): 37:29:b5:d6:ed:a8:60:b7:14:07:a5:18:e5:52:7b:be:3d:37:55:39:2e:f8:91:bc:e5:6b:16:35:df:f5:f5:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.kentik.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.kentik.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajuda.receitadigital.com
ayudarex.rexmas.com
cielosupport.applaudostudios.com
clientsuccess.suncommworld.com
crtb.coperbee.fr
cshelp.thesmstore.com
desk.blackid.app
desk.ghmc.com
desk.vugis.co.za
faq-commerciaux.cap-chanvre.fr
finance.zucor.shop
help.bolivia.roadtoultra.com
help.dlocal.com
help.fast.network
help.recoanywhere.com
help.sevenstaracademy.org
helpdesk.baiyuan.io
helpdesk.efkmoen.com
helpdesk.kentik.com
helpdesk.trutech-me.com
hr.luxerone.com
intern.netbee.ro
internal.symphonic.com
inv360.cyberit.co.il
kb.timewatch.co.il
operacoes.mobiauto.com.br
partners.dailydeals242.com
pau2.upal.edu.pe
rir.ingresso.com
sac.m8sistemas.com
sbomglobalsupport.softura.com
service.esure.ai
soporte.grupo927.com
soporte.izeven.com
soporte.onvopay.com
soporte.rga.cl
sup.ingresso.com
suporte.advaud.com.br
suporte.controladoria.digital
suporte.m8sistemas.com
suporte.tornera.com.br
support.akriviahcm.com
support.bolivia.roadtoultra.com
support.continuumads.com
support.cyberguard360.com
support.dctechit.com
support.dotscribe.com
support.emrit.io
support.ez-erc.com
support.fidemtg.com
support.finlence.com
support.gigserv.com
support.gracesimpkins.com.au
support.grantapp.eu
support.hklighting.com
support.initova.com
support.ionconcertmedia.com
support.nerdcom.do
support.nxa.tel
support.orthogonalcapital.com
support.parteeindustries.com
support.qitsolutions.com
support.raytel.net
support.resistanceibiza.com
support.rgv.works
support.samgi.com
support.sensecapmx.com
support.tekup.org
support.tendercare.com
support.tevi.com
support.tmc-india.in
support.tng.dev

Other certificates including the domain name kentik.com

(limited to 100 certificates)
t.www.kentik.com
*.in.our1.kentik.com
bankinastatus.mambu.com
statuspage.io
statuspage.io
statuspage.io
*.local.kentik.com
statuspage.io
*.api.hnd1.kentik.com
kb.kentik.com
statuspage.io
suporte.controladoria.digital
new.kentik.com
statuspage.io
statuspage.io
statuspage.io
go.kentik.com
*.hrd1.kentik.com
*.in.buf1.kentik.com
*.ui-dev.dfw1.kentik.com
suporte.controladoria.digital
kb.kentik.com
support.kentik.com
statuspage.io
*.kentik.com
statuspage.io
statuspage.io
*.in.buf1.kentik.com
support.xformative.cloud
internal-status.getbabyscripts.com
networkaf.kentik.com
internal-status.getbabyscripts.com
internal-status.getbabyscripts.com
*.api.jp1.kentik.com
statuspage.io
desk.churchadm.com
ajuda.receitadigital.com
*.in.buf1.kentik.com
*.in.fra1.kentik.com
internal-status.getbabyscripts.com
internal-status.getbabyscripts.com
internal-status.getbabyscripts.com
info.kentik.com
statuspage.io
statuspage.io
*.api.hnd1.kentik.com
statuspage.io
statuspage.io
statuspage.io
info.kentik.com
statuspage.io
helpdesk.yourtekpro.com
support.rmtcam.com
statuspage.io
go.kentik.com
internal-status.getbabyscripts.com
ajuda.receitadigital.com
*.api.our1.kentik.com
*.in.hnd1.kentik.com
*.in.our1.kentik.com
statuspage.io
suporte.controladoria.digital
bankinastatus.mambu.com
*.hrd1.kentik.com
networkaf.kentik.com
click.kentik.com
bankinastatus.mambu.com
info.kentik.com
*.in.jp1.kentik.com
*.in.nez1.kentik.com
statuspage.io
statuspage.io
new.kentik.com
statuspage.io
*.poc1.kentik.com
statuspage.io
*.api.nrt1.kentik.com
statuspage.io
support.strident.uk.com
t.www.kentik.com
statuspage.io
*.ui-dev.iad1.kentik.com
info.kentik.com
statuspage.io
pdl.kentik.com
t.www.kentik.com
statuspage.io
new.kentik.com
internal-status.getbabyscripts.com
statuspage.io
statuspage.io
internal-status.getbabyscripts.com
statuspage.io
*.kentik.com
statuspage.io
statuspage.io
t.www.kentik.com
soporte.masin.co
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for helpdesk.kentik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumUSvCSVS8Qf18LMVkT9
T2jHL/53JjJ6l6cQCq/P9oC5eCMlYCpObLvKVssL9/WJsA1IRqzpBiKrlwY7bVEy
4En0SmMokFAxigN2lTfECGwWMjmHCPXatox2LPVDXesLPDz+9n0tTrLEpSPfy/Op
/wmQ1u+pjs1jPN9kD6T1ckWftlbJOZdsTPBdhYOvxcsOPZJhsRSWzysjdAZEbEvw
hJUcOGKa41zCd/d1vUjv6euoRjCVCem0Qv4Ak7GoQxrFEXhO9o2b2vGseozf+ih5
N+BlsSaOpWV04cWCMYtjbQ+sn7z+ZjZVvq33KfVQ+2Dot4C4ACbHbYFHYzxMkJ3R
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380168711866990510751894683724199642168411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-29 15:41:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-27 15:41:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.kentik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23530165767989502972804195064271988632383266691159932993804812015028454083845205844228099038799992341390532934814609125519758836491277946005351223886500186827604026306469513820723839135968310456178986321749729057882400214488874107113313082355098872237819334733127692827338894685915759022636430421932959847207975541600904143433272578196650290015555308873152694566289720209625743218550584635523593895769786027397716855619732833243729193561515929622380068813290020286758061161816827757997206987532742242704402509777002004060533639338436933827632322015486947671854795985102144299661682475587251686553810710739861301481759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8326840b80fd97addb9d5713877a169ec1dbe567
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuda.receitadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudarex.rexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cielosupport.applaudostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsuccess.suncommworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crtb.coperbee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshelp.thesmstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.blackid.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.ghmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.vugis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq-commerciaux.cap-chanvre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.zucor.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.bolivia.roadtoultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.dlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.fast.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.recoanywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sevenstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.baiyuan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.efkmoen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.kentik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.trutech-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.luxerone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.netbee.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.symphonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inv360.cyberit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.timewatch.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operacoes.mobiauto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.dailydeals242.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pau2.upal.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rir.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.m8sistemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbomglobalsupport.softura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.esure.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.grupo927.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.izeven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.onvopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.rga.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sup.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.advaud.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.controladoria.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.m8sistemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.tornera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.akriviahcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bolivia.roadtoultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.continuumads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cyberguard360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dctechit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dotscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.emrit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ez-erc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fidemtg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.finlence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gigserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gracesimpkins.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.grantapp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hklighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.initova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ionconcertmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nerdcom.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nxa.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.orthogonalcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.parteeindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.qitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.raytel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.resistanceibiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rgv.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.samgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sensecapmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tekup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tendercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tmc-india.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tng.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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