help.factsquared.com

Issued by R3

About this certificate

This digital certificate with serial number 04:76:b5:d8:46:3c:f2:39:65:c9:09:95:e5:c8:b0:b1:86:61 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=help.factsquared.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:76:b5:d8:46:3c:f2:39:65:c9:09:95:e5:c8:b0:b1:86:61
Serial Number (int): 388844176251667565339225927864029512042081
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:95:54:8b:e6:22:87:15:38:56:27:72:d0:67:18:97:df:1a:17:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:fb:f8:7a:74:e0:3b:4c:12:3e:dd:d6:37:43:c6:de:3a:00:1c:ff
Fingerprint (sha256): 7f:c4:e3:b3:92:f7:df:4b:ef:af:b4:cd:10:7d:b8:bb:01:40:db:1b:f5:ec:07:59:31:be:40:07:e3:14:ff:c3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate help.factsquared.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for help.factsquared.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aidx.hedgehoglab.support
assistenza.webdojo.it
atencionalsocio.knotgroupdentalcorporation.com
atom.hedgehoglab.support
axiom-training.hmsfirst.com
ayuda.trabajando.com
bidvestnoonan.hedgehoglab.support
cleverclinic.hedgehoglab.support
contact.skydesk.dix.asia
contact.zvar.dix.asia
deliveroo.hedgehoglab.support
desk.lct.jp
ecraf.dcsbusiness.com
fasupport.oceanbridge.jp
hello.helpcenter.ch
help.carsonandbearpets.com
help.factsquared.com
help.geostar.net
help.prendacodeclub.com
help.raincaper.com
helpdesk.querytel.com
honcho.hedgehoglab.support
it.logitek.es
presaleslk.logitek.es
royalpharma.hedgehoglab.support
sac.extravirgen.cl
sax.inxap.com
sd.cyberit.co.il
sinclairpharma.hedgehoglab.support
soporte.holokrom.com
soporte.igscomputers.com
soporte.malldigital360.com
suporte.inteligenteti.com.br
support-eni.ino.global
support.7mtechnologies.com
support.abalancingact.com
support.baymac.net
support.beemailing.com
support.breakthroughbroker.com
support.canadianlic.com
support.datachain.co.za
support.escapeonline.com.au
support.experium.app
support.expmarketingcenter.com
support.factsquared.com
support.frandevcrm.com
support.gocreations.gr
support.gologic.com.au
support.greensoul.online
support.htsinc.com
support.infosec.com.tr
support.intrimgroup.com.au
support.jmdsas.com
support.juiceboxdash.com
support.kalpc.co.il
support.kdmarc.com
support.keyshot.info
support.keystonegrey.com
support.kulthorn.us
support.leadpyramid.com
support.monkeymoneyapp.com
support.mpowerbeverage.com
support.mytgs.io
support.paradigmitnetwork.com
support.payaza.co.za
support.pdm-automotive.com
support.portable-intelligence.com
support.proximanetworks.com
support.quikcloud.co.uk
support.quore.tech
support.regionglobal.com
support.relayondemand.com
support.rikeshthakrar.com
support.secureitsecurities.com
support.skyzoho.dix.asia
support.soaringed.com
support.spectracell.com
support.t3partners.com.au
support.totalcloudit.com
support.ultrasouthafrica.com
support.wabashvalley.com
support.wonderllc.com
support.x9.ae
support.zvar.dix.asia
supportportal.trucode.com
techsupport.vetcompandpen.com
testsupport.aspen-tech.com

Other certificates including the domain name factsquared.com

(limited to 100 certificates)
tls.automattic.com
help.factsquared.com
support.monkeymoneyapp.com
tls.automattic.com
help.factsquared.com
help.factsquared.com
support.totalcloudit.com
tls.automattic.com
help.factsquared.com
tls.automattic.com
support.keyshot.info
help.raincaper.com
help.factsquared.com
support.intrimgroup.com.au
tls.automattic.com
staging.client.factsquared.com
helpdesk2.lakepointe.church
tls.automattic.com
help.factsquared.com
support.secureitsecurities.com
support.relayondemand.com
help.freedomlinx.com
helpdesk2.lakepointe.church
tls.automattic.com
tls.automattic.com
support.techseek.com.au
support.keystonegrey.com
help.factsquared.com
help.factsquared.com
support.greensoul.online
help.factsquared.com
support.1zdevs.com
help.factsquared.com
support.monkeymoneyapp.com
help.factsquared.com
help.factsquared.com
*.factsquared.com
support.keystonegrey.com
tls.automattic.com
sd.cyberit.co.il
help.factsquared.com
tls.automattic.com
help.factsquared.com
help.factsquared.com
help.factsquared.com
help.factsquared.com
*.factsquared.com
tls.automattic.com
tls.automattic.com
help.factsquared.com
support.quikcloud.co.uk
tls.automattic.com
tls.automattic.com
support.totalcloudit.com
help.factsquared.com
help.onsitegroup.biz
tls.automattic.com
help.factsquared.com
*.factsquared.com
tls.automattic.com
help.factsquared.com
help.factsquared.com
*.factsquared.com
help.factsquared.com
support.swiift.co
staging.volta.factsquared.com
tls.automattic.com
corp.factsquared.com
help.factsquared.com
support.relayondemand.com
help.factsquared.com
help.factsquared.com
tls.automattic.com
support.totalcloudit.com
help.factsquared.com
help.factsquared.com
help.factsquared.com
tls.automattic.com
help.factsquared.com
staging.factbase.factsquared.com
*.factsquared.com
support.intrimgroup.com.au
help.factsquared.com
help.factsquared.com
help.factsquared.com
help.factsquared.com
support.madfiles.com
*.factsquared.com
help.factsquared.com
help.factsquared.com
staging.proofreaders.factsquared.com
support.techseek.com.au
help.factsquared.com
support.totalcloudit.com
support.monkeymoneyapp.com
help.factsquared.com
support.madfiles.com
*.factsquared.com
support.canadianlic.com
support.1zdevs.com

Certificate

The complete raw certificate details for help.factsquared.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQT5jV841fbBjx9WbLsl
003GRfZAwZX5km+GrZnl9yt++wuTQTYEYyO5nABPVIHQFMaDSSvrRxPiJELca7t3
tJ56EEmWUyIjtFBhq3JB5iaHXOwsXT6xg3myzTc9Lm5Vv1HIo0qkkzgFg0uCit5W
/skqW2p5/PFTXRWAqP8pB6TA+N6M9vT0mwfkaL+V5I9lAZGH4TWBNYM47p9WZQY3
/Q7MVV/cfaeWvpZmY8YveQFvB8DgUH6xkwOGUPajO5GWsIj6p+HyuSNOOHx230jt
J2g+UQ+eo7OmRG4dNHJsI5XnF2Ghldyz/Eq5Sfku/k3Z8SSorWzXJKfRBvrjfjk5
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388844176251667565339225927864029512042081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 11:08:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 11:08:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'help.factsquared.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22346633150918248986148225732216429208548277769772040605765016851594927162951647643075352875757605513043183262856411735543969262451516483474371171334363153508787496916068066564876806825999030792528801297392162653625547066430492215428775040650729725867149414544016764178003345749160363662095274887624765923359142883112830211278386012799189211376067561056956377602570945701448539547551338266742665369999348866730195244244352632175110549705535384160854827453525231947704662047914847230623750599925533989852117891302670658112086704202232762507834849435275343759074654731738697631949590180197426875970636519844250683783457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2695548be622871538562772d0671897df1a173c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidx.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.webdojo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atencionalsocio.knotgroupdentalcorporation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atom.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axiom-training.hmsfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.trabajando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvestnoonan.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleverclinic.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.skydesk.dix.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.zvar.dix.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveroo.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.lct.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecraf.dcsbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasupport.oceanbridge.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.helpcenter.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.carsonandbearpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.factsquared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.geostar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.prendacodeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.raincaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.querytel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honcho.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.logitek.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presaleslk.logitek.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalpharma.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.extravirgen.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sax.inxap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd.cyberit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinclairpharma.hedgehoglab.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.holokrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.igscomputers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.malldigital360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.inteligenteti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-eni.ino.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.7mtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.abalancingact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.baymac.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.beemailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.breakthroughbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.canadianlic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.datachain.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.escapeonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.experium.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.expmarketingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.factsquared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.frandevcrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gocreations.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gologic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.greensoul.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.htsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.infosec.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.intrimgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.jmdsas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.juiceboxdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kalpc.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kdmarc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.keyshot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.keystonegrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kulthorn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.leadpyramid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.monkeymoneyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mpowerbeverage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mytgs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paradigmitnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.payaza.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pdm-automotive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.portable-intelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.proximanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.quikcloud.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.quore.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.regionglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.relayondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rikeshthakrar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.secureitsecurities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.skyzoho.dix.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.soaringed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.spectracell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.t3partners.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.totalcloudit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ultrasouthafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.wabashvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.wonderllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.x9.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zvar.dix.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportportal.trucode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techsupport.vetcompandpen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsupport.aspen-tech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f52f46d58000004030047304502204e30fede563031b9dfbe2b5845ca9da49b5916e68106eeda6d2d7f0dbdc61f3b022100d59cf66e570bd5237a3fc4d735f3e34536a109802ae0ebfbcf16014161ca6db0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f52f46d58000004030046304402207ebe9f22b6ef53b8f5ee67852b7b1b24ba421c563ac4ceb2c972b941fcdb80d60220269918d409e82199f02682617d79920d13a8963ec9c187ccf2ad804a62d48c4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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