suporte.controladoria.digital

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:00:56:3c:ad:a4:f2:fc:af:4e:e8:c4:10:ef:b3:57:d7 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=suporte.controladoria.digital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:00:56:3c:ad:a4:f2:fc:af:4e:e8:c4:10:ef:b3:57:d7
Serial Number (int): 421610300383274687855294415308850791143383
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:6b:93:17:88:4d:a5:ee:7e:1d:82:e6:af:52:13:68:c1:e5:38:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:3d:ce:37:52:f0:fd:d7:2f:5c:25:fa:92:4f:1c:7f:9a:e2:37:ea
Fingerprint (sha256): 43:ff:40:e3:f1:a4:ae:32:05:a6:b5:ad:a6:d6:b0:df:c0:2a:8d:72:f6:9b:50:8e:fd:cf:8c:08:11:a4:bc:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate suporte.controladoria.digital

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suporte.controladoria.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajuda.receitadigital.com
ayudarex.rexmas.com
care.toucango.net
cielosupport.applaudostudios.com
clientsuccess.suncommworld.com
crtb.coperbee.fr
cshelp.thesmstore.com
desk.blackid.app
desk.ghmc.com
desk.sbensonlegal.com
desk.vugis.co.za
eventos.ingresso.com
get.tcc.help
help.bolivia.roadtoultra.com
help.dlocal.com
help.fast.network
help.recoanywhere.com
help.sevenstaracademy.org
help.teachersolympiad.com
helpdesk.1stopinstall.com
helpdesk.baiyuan.io
helpdesk.efkmoen.com
helpdesk.kentik.com
helpdesk.trutech-me.com
helpdesk.yourtekpro.com
hr.luxerone.com
humancapital.tafaseel.ae
intern.netbee.ro
internal.symphonic.com
inv360.cyberit.co.il
kb.timewatch.co.il
partners.dailydeals242.com
pau2.upal.edu.pe
request.eleviamedia.com
rir.ingresso.com
sac.m8sistemas.com
sbomglobalsupport.softura.com
service.esure.ai
servicedesk.tccrew.co.za
soporte.ensancarlos.com
soporte.izeven.com
soporte.masin.co
soporte.onvopay.com
soporte.peruapps.com.pe
sup.ingresso.com
suporte.advaud.com.br
suporte.controladoria.digital
suporte.m8sistemas.com
suporte.tornera.com.br
support.akriviahcm.com
support.blacksheepmedia.co.uk
support.bolivia.roadtoultra.com
support.continuumads.com
support.coreproducts.ca
support.cyberguard360.com
support.dctechit.com
support.dotscribe.com
support.emrit.io
support.ez-erc.com
support.finlence.com
support.gigserv.com
support.grantapp.eu
support.hklighting.com
support.initova.com
support.ionconcertmedia.com
support.luxrallytravel.com
support.mbpractice.com
support.metatactical.com
support.mindsize.com
support.nerdcom.do
support.nxa.tel
support.orthogonalcapital.com
support.qitsolutions.com
support.raytel.net
support.resistanceibiza.com
support.rgv.works
support.rmtcam.com
support.samgi.com
support.sensecapmx.com
support.tekup.org
support.tendercare.com
support.tevi.com
support.thecocktailmaker.com
support.tmc-india.in
support.tng.dev
support.xformative.cloud
support.zilmoney.com
tickets.onlinemarketing-zentrum.ch

Other certificates including the domain name controladoria.digital

(limited to 100 certificates)
suporte.controladoria.digital
suporte.controladoria.digital
support.xformative.cloud
desk.churchadm.com
ajuda.receitadigital.com
helpdesk.yourtekpro.com
support.rmtcam.com
ajuda.receitadigital.com
suporte.controladoria.digital
support.strident.uk.com
soporte.masin.co
support.aztec.city
suporte.escritax.com.br
suporte.controladoria.digital
support.strident.uk.com
suporte.controladoria.digital
support.coreproducts.ca
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
suporte.controladoria.digital
controladoria.digital
tickets.onlinemarketing-zentrum.ch
support.mindsize.com
suporte.controladoria.digital
suporte.escritax.com.br
suporte.controladoria.digital
suporte.controladoria.digital
suporte.controladoria.digital
suporte.controladoria.digital
support.ez-erc.com
soporte.masin.co
support.mindsize.com
suporte.controladoria.digital
internal.symphonic.com
suporte.controladoria.digital
controladoria.digital
suporte.controladoria.digital
helpdesk.kentik.com
support.rmtcam.com
helpdesk.yourtekpro.com
soporte.peruapps.com.pe
cielosupport.applaudostudios.com
desk.churchadm.com
suporte.controladoria.digital
humancapital.tafaseel.ae
suporte.controladoria.digital
suporte.controladoria.digital
controladoria.digital
controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
humancapital.tafaseel.ae
suporte.controladoria.digital
suporte.controladoria.digital
ajuda.receitadigital.com
suporte.controladoria.digital
desk.churchadm.com
eventos.ingresso.com
ajuda.receitadigital.com
support.techbyhart.com
support.lumenave.com
suporte.controladoria.digital
suporte.controladoria.digital
internal.symphonic.com
support.blacksheepmedia.co.uk
suporte.controladoria.digital
suporte.controladoria.digital
helpdesk.bhamtastic.com
support.zilmoney.com
support.mbpractice.com
ajuda.receitadigital.com
support.rmtcam.com
suporte.controladoria.digital
support.ez-erc.com
suporte.controladoria.digital
support.ez-erc.com
soporte.masin.co
suporte.controladoria.digital
support.blacksheepmedia.co.uk
helpdesk.kentik.com
soporte.peruapps.com.pe
suporte.controladoria.digital
suporte.controladoria.digital
surfrance-client.adnagile.com
care.toucango.net
tickets.onlinemarketing-zentrum.ch
care.toucango.net
controladoria.digital
support.lumenave.com
help.teachersolympiad.com
support.mindsize.com
support.mindsize.com
support.aztec.city
suporte.controladoria.digital
suporte.controladoria.digital
suporte.controladoria.digital
suporte.controladoria.digital
soporte.peruapps.com.pe

Certificate

The complete raw certificate details for suporte.controladoria.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPXgnMjVi7Ql+RZ9DRLu
CV7ZcYocIuF0OKWE+SxlaiixSPe2Yz0Q+fPzxkwSQVHCCEQfjYWXkPEnGk/2AF8M
3M4vsCGfcP+3KUhAgGAx8X5nIPJn1B0gDNxMxel1qpp7NZ4x4vEmGVAVukRnmcUv
csI3iAhKEzszNweEM3KGUaAndRwB2pruENI4yqW7m4Fn2IDHBKFvpfnzDOfr7H9T
AskXPvBTeBjO4P6w7TiDc3gRPE922QHZhRgJMOMha8Jw+NnId38pE4cZsUXry8Vj
139HI3euuAr69RNI8XHdXYLnl8Nd6/E7LI5bM485p+CafzCHWxBG2xQab5irKVeS
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421610300383274687855294415308850791143383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-29 12:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 12:09:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'suporte.controladoria.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22339188335114974397090922453863732903913685960351466043288757854630231057977517806054191108525157676575446622885954322438952617856247666918343303156809317673720414823647132628093584016482221595685098107010612363536681032489768025939169156011673177879024603027837594610308939447843439865906243494767682562819311233116251441378094271415848570300572731835232488020919273049143244659793201372279950629710946609302746986508422747000661845744822121948240958006296917666370406422629001756357154902139807608782292572452845938303311401016815690720210464062758726786451898868610534706489797484405644143151950350593034412331683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							896b9317884da5ee7e1d82e6af521368c1e53881
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2037 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuda.receitadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudarex.rexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.toucango.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cielosupport.applaudostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsuccess.suncommworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crtb.coperbee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshelp.thesmstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.blackid.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.ghmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.sbensonlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.vugis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tcc.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.bolivia.roadtoultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.dlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.fast.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.recoanywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sevenstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.teachersolympiad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.1stopinstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.baiyuan.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.efkmoen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.kentik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.trutech-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.yourtekpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.luxerone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humancapital.tafaseel.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.netbee.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.symphonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inv360.cyberit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.timewatch.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.dailydeals242.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pau2.upal.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'request.eleviamedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rir.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.m8sistemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbomglobalsupport.softura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.esure.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.tccrew.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.ensancarlos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.izeven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.masin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.onvopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.peruapps.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sup.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.advaud.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.controladoria.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.m8sistemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.tornera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.akriviahcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.blacksheepmedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bolivia.roadtoultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.continuumads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.coreproducts.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cyberguard360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dctechit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dotscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.emrit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ez-erc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.finlence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gigserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.grantapp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hklighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.initova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ionconcertmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.luxrallytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mbpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.metatactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mindsize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nerdcom.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nxa.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.orthogonalcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.qitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.raytel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.resistanceibiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rgv.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rmtcam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.samgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sensecapmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tekup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tendercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.thecocktailmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tmc-india.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tng.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xformative.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zilmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.onlinemarketing-zentrum.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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