support.portmanlights.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e3:76:ed:98:2c:a5:fc:ff:ff:85:24:97:2a:19:c0:e1:a9 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=support.portmanlights.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e3:76:ed:98:2c:a5:fc:ff:ff:85:24:97:2a:19:c0:e1:a9
Serial Number (int): 338739037650655533763733912302210967986601
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:2a:22:df:2e:7f:c4:ad:3e:1f:9e:2a:61:de:de:c8:8b:54:ee:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:ae:03:a4:60:6b:56:76:0a:bc:77:9c:81:73:49:94:a2:d2:f8:ee
Fingerprint (sha256): 57:cc:ae:9c:18:9f:a7:fb:0a:3e:fc:a5:18:a1:e1:52:f0:b7:e8:35:2d:9f:dc:1c:31:5c:ac:63:89:5d:bc:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.portmanlights.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.portmanlights.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aid.wavedesk.be
assistance.lafsante.com
assistenza.chipuca.it
ayuda.logisticsexpress.es
base-test.adnagile.com
contact.ysendit.com
desk.idealkurier.pl
desk.wikimedia.de
desk.z.domusvi.pt
flota.idealkurier.pl
gestiondocumentaire.lobbyisme.quebec
help.i-mas.es
help.seimo.net
help.stormeup.com
helpcenter.thethinkingtraveller.com
helpdesk.bbcom-uc.de
helpdesk.demo5.flowseasy.com
helpdesk.itinsights.co.uk
helpdesk.ldsconsulting.co.uk
helpdesk.netb.uk
helpdesk.sungiftsolar.co.uk
helpdesk.wwftrace.nl
hilfe.comdesk.de
hilfe.electric-runner.de
hilfe.tablewise.de
hypontech.supportgt.com
in2betsupport.crunchequation.com
kadry.idealkurier.pl
operacja.idealkurier.pl
portail.intelliwan.fr
service-pf-qa.belsura.ch
service.idealkurier.pl
service.itq.eu
servicedesk.hazcheck.com
soporte.parkandgreet.com
soutienadministratif.lobbyisme.quebec
suport.leelo.ro
support.3rdpixel.co.uk
support.aiad.bzh
support.amzadvicecentre.com
support.arije.paris
support.batiscript.com
support.buggfry.com
support.clouds-it.dk
support.crmexperts.es
support.dietz.digital
support.digiformer.net
support.dm2.liebpercloud.de
support.erzgebirgskiste.de
support.fancom.com
support.foxinnovations.be
support.franceemploidomicile.fr
support.hubdoo.de
support.irishpremiumspirits.com
support.ivmeka.com
support.kaaphoorn.net
support.krollit.com
support.looklet.com
support.lynceus-partners.com
support.makingthegame.com
support.mobilygreen.fr
support.motiverse.de
support.mykobo.co
support.newtonproperty.co.uk
support.nexusimprovement.com
support.onitec.fr
support.ontdekkers.nl
support.output42.com
support.portmanlights.com
support.rcnet.ie
support.remilede.eu
support.rensen.nu
support.rogold.live
support.sdec-france.com
support.sf.digital
support.skorfactory.com
support.technasolis.co.zw
support.tekom.pl
support.theadvicecentre.ltd
support.zeportal.net
supportlds-solutions.appgcd.fr
supporto.crux10.cloud
supporto.kaosinformatica.it
supporto.magoot.it
supporto.nexapp.it
supporto.starch.it
www.support.mondra.com

Other certificates including the domain name portmanlights.com

(limited to 100 certificates)
sni150968.cloudflaressl.com
portmandeco.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
portmandeco.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
portmandeco.com
sni150968.cloudflaressl.com
support.portmanlights.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
portmanlights.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
portmandeco.com
sni.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com
sni230985.cloudflaressl.com
sni150968.cloudflaressl.com
sni150968.cloudflaressl.com

Certificate

The complete raw certificate details for support.portmanlights.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMuRKHmXP9E/62Uv5GKe
eB+XALbZfXGq229OhwcJ3n5P7cFF6ph4ONkKuRS76x3E7f8TZr4DGw6z4pBs/nto
Ckj2Ps9L320x8siA4mFrUrZ8JSwUKgx1lb756oj3ycQutq8BhwhVbfD53f6p+NsN
g60GJzbO1f6RFNPPGOYzw4jw7r0Qhb7A02HsMSMOEnpWu8mQR24HkFx24M5ryqzS
vyzt9Cpynl29RGTd25YBQFC/2ig4HQ2StO/l0mvx7FuoDDTzqbIm1gsnjX0CwQ77
MNG6MWq8/XN0Bmb4rWvGsabIjZMedG0GwWpoRY74jVygREGUNmA7sAt0PZWcZgIU
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338739037650655533763733912302210967986601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 14:32:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 14:32:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.portmanlights.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22823277534662721596998704270032354560415174585596880512354077019487169035677211357744105877932234340564975987346159097738482612807601647291164542062932679312015366001007430579895888430030624736984370842503121401435903587192787528239723877610530639630582925275752394175997478831164670140574347194136856511714216187656899477737267903688781140719519723178282890635819545335685361461177263970365193866475070833964061389441010912843746607649679788193958975183129269050971061507991346491438907552150298481029834145802878096842832393664173348958769545581189165680243919361985662666693082251653318437416224727072546121454741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							552a22df2e7fc4ad3e1f9e2a61dedec88b54eec7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2081 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aid.wavedesk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistance.lafsante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.chipuca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.logisticsexpress.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-test.adnagile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.ysendit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.idealkurier.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.wikimedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.z.domusvi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flota.idealkurier.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestiondocumentaire.lobbyisme.quebec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.i-mas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.seimo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stormeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.thethinkingtraveller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.bbcom-uc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.demo5.flowseasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.itinsights.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ldsconsulting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.netb.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.sungiftsolar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wwftrace.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilfe.comdesk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilfe.electric-runner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilfe.tablewise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypontech.supportgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in2betsupport.crunchequation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadry.idealkurier.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operacja.idealkurier.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.intelliwan.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-pf-qa.belsura.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.idealkurier.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.itq.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.hazcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.parkandgreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soutienadministratif.lobbyisme.quebec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suport.leelo.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.3rdpixel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.aiad.bzh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.amzadvicecentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.arije.paris'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.batiscript.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.buggfry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.clouds-it.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.crmexperts.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dietz.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.digiformer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dm2.liebpercloud.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.erzgebirgskiste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fancom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.foxinnovations.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.franceemploidomicile.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hubdoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.irishpremiumspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ivmeka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kaaphoorn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.krollit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.looklet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lynceus-partners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.makingthegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mobilygreen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.motiverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mykobo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.newtonproperty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nexusimprovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.onitec.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ontdekkers.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.output42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.portmanlights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rcnet.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.remilede.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rensen.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rogold.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sdec-france.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sf.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skorfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.technasolis.co.zw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tekom.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.theadvicecentre.ltd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zeportal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportlds-solutions.appgcd.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.crux10.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.kaosinformatica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.magoot.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.nexapp.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.starch.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.mondra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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