internal.colourtech.co.za

Issued by R3

About this certificate

This digital certificate with serial number 03:21:8d:7b:91:06:c1:e5:5d:63:e3:8f:b4:8c:54:03:d6:b1 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=internal.colourtech.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:8d:7b:91:06:c1:e5:5d:63:e3:8f:b4:8c:54:03:d6:b1
Serial Number (int): 272754238645075751552549523539109278373553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:f2:0a:d0:62:22:75:e1:66:cd:3f:08:cb:66:2f:58:aa:d0:f9:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:e0:fc:a7:11:bf:06:ef:f5:3a:99:b7:58:46:3c:45:4c:ab:92:b5
Fingerprint (sha256): 68:3a:33:05:f4:21:8c:fe:cc:09:e3:7d:ba:26:a9:89:54:fb:fe:2d:14:68:9b:68:bc:1a:1b:c5:1a:0d:ec:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate internal.colourtech.co.za

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for internal.colourtech.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.wifigarden.com
arap.lhclinc.com
assistenza.ecologica.it
auditsupport.jessonauditors.co.za
auxilio.omnitok.com
binance.dlocal.com
bvssupport.1on1lms.com
contractor.soldinasnap.com
customerportal.dlocal.com
customersupport.coralpay.com
desk.essentialstudios.ca
desk.prem-box.com
fleetcontrol.clm.co.uk
fraud-support.edaat.sa
freshiisupport.ur-channel.com
hd.um-tel.com
help.cheddarlinks.com
help.rmgautofinance.org
help.wonsulting.com
help2.jdeckman.com
helpcenter.rapidascent.com
helpcenter.wygroup.net
helpcenter.wyperformance.com
helpdesk.aembs.net
helpdesk.fibraforte.it
helpdesk.fmgsuite.com
helpdesk.ga-integraciones.com
helpdesk.media-technica.com
helpdesk.piquacomputer.com
helpdesk.royalamericanhospitality.com
helpdesk.unitedag.org
helpdesk.viperit.co.za
helpme.phase7.digital
internal.colourtech.co.za
it-help.medmark.eg
it.ronati.com
itsupport.quintewest.ca
ldmsupport.lenovocloudsoftware.com
maintenance.menergia.jp
marketinghd.oorah.org
portal.cloud-resolve.com
portal.elpueblomanda.org
psn.ronati.com
quotes.goyeslogistics.com
soporte.canelasoluciones.com
soporte.nerdcom.do
soporte.tecnocomprascr.com
suporte.expansao.company
suporte.sanus.tech
support.admentus.com
support.broadiesaircraft.com
support.buildingtoscale.com
support.caprarotechnologies.com
support.cymetricx.com
support.digital-coach.com
support.empirerecycling.com
support.evareg.com
support.firstresponse.solutions
support.granville-energy.com
support.groupedmb.com
support.ibaia-immobilier.com
support.intellyk.com
support.ivimsupplements.com
support.jumbish.co
support.m86.land
support.movizzon.com
support.naft.com.sa
support.odysseymedical.ca
support.ops-com.com
support.oskorp.com
support.planning.media
support.pureleafkratom.net
support.seemyservices.com
support.shopgenius.org
support.smallscreenproducer.com
support.techproeducation.com
support.threepedals.com
support.tickiot.com
support.traduzioninaati.it
support.whiteitservices.com
support.yajny.com
supportdesk.tng.dev
system-support.interimcredentials.com
team.soldinasnap.com
testzoho.4insite.com
ticket.martintech.xyz
tsmsupport.lenovocloudsoftware.com
websupport.cosmickmedia.com
www.hazidsupport.com

Other certificates including the domain name colourtech.co.za

(limited to 100 certificates)
colourtech.co.za
seyfferdt.co.za
colourtech.co.za
autodiscover.colourtech.co.za
colourtech.co.za
support.yoizen.com
zoho.aimsoftware.com.au
seyfferdt.co.za
colourtech.co.za
tsmsupport.lenovocloudsoftware.com
seyfferdt.co.za
help.odce.arizona.edu
internal.colourtech.co.za
seyfferdt.co.za
colourtech.co.za
help.odce.arizona.edu
seyfferdt.co.za
mail.seyfferdt.co.za
tsmsupport.lenovocloudsoftware.com
seyfferdt.co.za
internal.colourtech.co.za
support.audiocontrolpro.com
portal.skynetworkssolutions.com
ayuda.labodega.digital
cippt.org.za
seyfferdt.co.za
ayuda.labodega.digital
seyfferdt.co.za
ayuda.labodega.digital
support.nucular.tech
internal.colourtech.co.za
tsmsupport.lenovocloudsoftware.com

Certificate

The complete raw certificate details for internal.colourtech.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweVTZaORZxJcvZVacSWF
E5By79xzIrSp7F5+ZKaP1/VAyu6ZLqT+CE7vpO0p8+6sCL7wITTeHU791D6KYK6+
JKvuYDVlY6cytXWSeUGza2tu17upDmLDZ29I90jTerl4bKl5atpQfDU59SRLKqMJ
pyStrMM7NzzS7N6w06c03JhD61H9a/LOnXjbUbjD3NUifOnjVv09CYxYRKTXmR/c
70n794SpIeSsj89w6xd8r6qLd6kHUs2mcRk8xVn1ml4b3Cu5Pnvquz8/smWOM28s
QF1X84Yb+mrrXB/zzTLfDszeVKQUDOhPwoHLqFOK4nPmReOoMHYgOhZTcVXj8lsh
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272754238645075751552549523539109278373553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 11:37:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-21 11:37:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'internal.colourtech.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24477077610183787415735613690961205823250718248246924153372351417769142466805241419693740896895765923294160292753113469895360999508226516337952518066265939475085810640762756364360555108236514076492621250712193524562212387294900284912405542465860540088118004725016860732023156810627995526431340748191123369656794377794559480316755098818018788776058326401623347259227120959696228388477752237544616184720756210457963774652053828785959228132274613076550264916477299427307678399026132975287262535375072886539398972288790311498597045245910794973818761419463781261411962643910243988251558261944038630651292852653233803043227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09f20ad0622275e166cd3f08cb662f58aad0f92d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.wifigarden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arap.lhclinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.ecologica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditsupport.jessonauditors.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auxilio.omnitok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binance.dlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvssupport.1on1lms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractor.soldinasnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.dlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.coralpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.essentialstudios.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.prem-box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetcontrol.clm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud-support.edaat.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshiisupport.ur-channel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hd.um-tel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.cheddarlinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.rmgautofinance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wonsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help2.jdeckman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.rapidascent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.wygroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.wyperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.aembs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.fibraforte.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.fmgsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ga-integraciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.media-technica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.piquacomputer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.royalamericanhospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.unitedag.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.viperit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpme.phase7.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.colourtech.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-help.medmark.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.ronati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.quintewest.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldmsupport.lenovocloudsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.menergia.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinghd.oorah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cloud-resolve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.elpueblomanda.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psn.ronati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.goyeslogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.canelasoluciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.nerdcom.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.tecnocomprascr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.expansao.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.sanus.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.admentus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.broadiesaircraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.buildingtoscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.caprarotechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cymetricx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.digital-coach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.empirerecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.evareg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.firstresponse.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.granville-energy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.groupedmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ibaia-immobilier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.intellyk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ivimsupplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.jumbish.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.m86.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.movizzon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.naft.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.odysseymedical.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ops-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.oskorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.planning.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pureleafkratom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.seemyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.shopgenius.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.smallscreenproducer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.techproeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.threepedals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tickiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.traduzioninaati.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.whiteitservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yajny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportdesk.tng.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'system-support.interimcredentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.soldinasnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testzoho.4insite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.martintech.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsmsupport.lenovocloudsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websupport.cosmickmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hazidsupport.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188489d3511000004030046304402207fa8de713d6738b2f3c8a3250af8cda040ebf28aa462162e46267883c62f3c1c022034968a67869dcf903a7fe7cd8755f49d381d8904cd1de433b480d9483b47b494007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000188489d353e000004030046304402204cc0ac7997e0368f58e6ed340ecea72a3be5272c810062e9bccf806ef5bbe88e0220480f0a4e4b8f3d6b9f08598f4723dca522ab4089ef2b7fa99dd51fd371a6fcdb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027859ca586c5d157c9b0be5cf1b6e883eab2234cae48e906ab64eea498b01dc21b9ddebf187e18cba3905e6f5d78735ada448532fd0a130ff25e2984d840ffc760b2ae9efda390a88ead11d411aed939d5cce57178d676922efde94930991546f225d4cd6ddf90f9ab5da2e91bc7da3875637439fad6e0458ddc30dbb77e7a052cce2e6ec0f2e75bd4b27ea37166cbe5153292ecd7a2de05612929747164f0ffc1ed3b56490a2eaa0807d6028a0046f0f622b4d7f08f3166c1523c1acff596889ec8c0f0e4f5342f4bce70955a24d4d9cc081197474d7cc3f65dc4ddea0761e68d84c5d01e80d68438df61393d35cda1e0ea39c807c7470d84e81f3d848cd6cb