support.tappyrewards.com

Issued by R3

About this certificate

This digital certificate with serial number 03:04:59:74:ba:9a:16:be:61:47:98:28:ed:72:d2:65:14:36 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=support.tappyrewards.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:04:59:74:ba:9a:16:be:61:47:98:28:ed:72:d2:65:14:36
Serial Number (int): 262816894645761303478337980459873055609910
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2b:8d:e2:b2:ae:1a:e9:de:48:48:e9:8b:fb:ee:e8:dc:da:6d:27:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:a9:7a:ce:d4:ba:59:3d:1c:41:a3:2a:5f:9d:11:80:9a:0b:b5:92
Fingerprint (sha256): 42:09:62:0c:87:65:ae:02:f0:f8:2e:df:66:49:e5:3f:84:92:72:90:e6:c2:6a:00:c7:6b:19:35:28:20:7c:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.tappyrewards.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.tappyrewards.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsupport.aspen-tech.com
anlapphat.citek.vn
bio.citek.vn
books2.jawascript.net
cadivi.citek.vn
dataprotection.desk.cubepayment.com
desk.nova-analyticlabs.com
desk.rickandnix.com
desk.sunovio.com
employeecare.cpousa.com
experiencias.coovitel.privilegios.vip
fecon.citek.vn
fudo.support.r2.co
giahoa.citek.vn
help.clixby.app
help.gprsinc.com
help.it-portal.com
help.mkcomputers.org
help.northbrook.nz
help.scopicsoftware.com
help.zuloomi.com
helpdesk.axessusa.com
helpdesk.enconnex.com
helpdesk.ennoventure.com
helpdesk.globalxperts.net
hr.oodc.com.ph
it.comevo.com
kb.ethostec.net
klap.support.r2.co
mainetti.citek.vn
maison.citek.vn
nexsource-sbo.nexus-sr.com
nonpm.scopicsoftware.com
pacifichost.forafarmer.com
partner.basecampconnect.com
payu.support.r2.co
qwerty.aaathavan.com
saleszapps.quantri40.vn
servicedesk.onex.co
shiseido.citek.vn
soporte-interno.atentus.com
soporte.cloudbaselatam.com
soporte.smarty.com.ar
soporte.vsi-industrial.com
soporte.zoluciones.pe
suporte.exitusmarketingdigital.com.br
suporte.portal89.com.br
support.cloudopenspace.com
support.cmxcinemas.com
support.conversion-hub.com
support.cptteller.co.za
support.creatorscripts.com
support.customerization.ca
support.deihssolutions.com
support.dokopoint.com
support.earthscapes.in
support.gamingedge.net
support.gatewayshospital.org
support.goliveus.com
support.gresnickrealty.com
support.hoymiles.com
support.in.betway.com
support.ingran.co.za
support.innovorg.com
support.iplinktelecom.com
support.lingo4all.com
support.lumiring.com
support.mkt.house
support.mykring.com
support.namanhr.com
support.newzooland.com
support.nightowl.care
support.niveshonline.com
support.paisawapas.com
support.pimtoday.com
support.probewell.com
support.sciencerestaurants.com
support.signalmash.com
support.simsip.com
support.spectrumphotography.com
support.tappyrewards.com
support.teligentip.com
support.tripmaza.com
support.tristatehomeservices.com
support.wanasapps.com
support.whiteoakpartners.com
support.yeshivaschools.com
vas.citek.vn
workday.hhmhotels.com
zoho.silvprop.com

Other certificates including the domain name tappyrewards.com

(limited to 100 certificates)
support.tappyrewards.com

Certificate

The complete raw certificate details for support.tappyrewards.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy+/pL6Gb0LyUPndcUbf
PzIxLGFcpKS/T22viG3lRKiAL93tCtfJOATkMcthDvinotkSPhpOCh/wqDAXYG/8
wuzwploB7lxOwroW7sv9dkXKMre414D4u1VGPIeJQSpLKaW0D3FgKg9auXa5FOB5
iMxMRLL9RKnELdSwYhZpJYLM0CWQ8HyOYjcoJjvUSHLJNB65FEwUc5JF65TMrklV
vVD1zJ0N0VzatlSbheOyvz2q5YhZ+o3mGJhtqiTmYqRgUyPPRngHx8ymp6FUhMnd
yGKojXMNN2DqUQa68V4jv3hzPwWXzylhjLnE38VhX/zVi8AQjIlL175o85/+5nhI
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262816894645761303478337980459873055609910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 22:41:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 22:41:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.tappyrewards.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21610295865138591677055035187284440677701315734248372743460079396341703437564759212072257747500222430872882677875637726094928864812388554106403888687989104721343057834757980193351376430604297861258946133569602213080481486226813001618999636650973963968278447577359165213712100801863346521614359207658060496043539298433232229746687476942772542494136597401428412236454828866345040493000186146566943569870493777402534483496363238178716750010318780215120190599944894555000224560411530415569715562752997724583389854438200097610686416849450093009611935028372763539132319959404480630486444667880283853535073073060451681060871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b8de2b2ae1ae9de4848e98bfbeee8dcda6d27ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2138 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsupport.aspen-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anlapphat.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books2.jawascript.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadivi.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataprotection.desk.cubepayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.nova-analyticlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.rickandnix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.sunovio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeecare.cpousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experiencias.coovitel.privilegios.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecon.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fudo.support.r2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giahoa.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clixby.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.gprsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.it-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mkcomputers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.northbrook.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.scopicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.zuloomi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.axessusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.enconnex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ennoventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.globalxperts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.oodc.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.comevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.ethostec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klap.support.r2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainetti.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexsource-sbo.nexus-sr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonpm.scopicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacifichost.forafarmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.basecampconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payu.support.r2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qwerty.aaathavan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleszapps.quantri40.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.onex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiseido.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte-interno.atentus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.cloudbaselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.smarty.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.vsi-industrial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.zoluciones.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.exitusmarketingdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.portal89.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cloudopenspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cmxcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.conversion-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cptteller.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.creatorscripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.customerization.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.deihssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dokopoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.earthscapes.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gamingedge.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gatewayshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.goliveus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gresnickrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hoymiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.in.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ingran.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.innovorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.iplinktelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lingo4all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lumiring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mkt.house'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mykring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.namanhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.newzooland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nightowl.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.niveshonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paisawapas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pimtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.probewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sciencerestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.signalmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.simsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.spectrumphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tappyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.teligentip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tripmaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tristatehomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.wanasapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.whiteoakpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yeshivaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workday.hhmhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoho.silvprop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef8bc727b000004030048304602210096e5ecc18eb658a6410d9d77414aae71a1a70a8dd6201d7c93c1057da14714c30221009e9188175d29b6f939e7601e6012644ffb48e53cdce69950beff379a8a6c20aa00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ef8bc72cd00000403004730450221009430bb86ed44f8aca5bd2ca90b37f7ce027b0a52814a4b587ffe1c498e0f34eb02202ff88964656f3e2c97f3384842a1725557ce3699727e80e5840f5ba31c34c25b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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