helpdesk.nauit.lt

Issued by R3

About this certificate

This digital certificate with serial number 04:17:5e:95:35:9a:2f:30:f6:7e:d4:03:ab:c0:19:ef:d6:cc was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=helpdesk.nauit.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:5e:95:35:9a:2f:30:f6:7e:d4:03:ab:c0:19:ef:d6:cc
Serial Number (int): 356401360337241726036200729850143914841804
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2b:2a:a1:c9:c2:1e:91:55:22:1f:75:58:94:10:63:43:e1:23:cb:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:db:41:77:66:77:82:40:83:fb:55:f2:7a:bf:8d:4d:ef:67:4c:05
Fingerprint (sha256): 80:96:e6:9d:51:a0:1c:0a:fc:b1:d6:e8:29:c7:01:ae:aa:28:49:83:c4:50:68:04:15:ff:3a:fa:ba:73:a7:2f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate helpdesk.nauit.lt

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for helpdesk.nauit.lt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

demo.servicedeskplus.nl
dsghelpdesk.deeset.co.uk
help.idowa.de
help.sch1584.ru
help.thereader.org.uk
helpdesk.aldaholding.com
helpdesk.alivetravel.com
helpdesk.cartrawler.com
helpdesk.commit.fi
helpdesk.cysec.gov.cy
helpdesk.flashengenharia.com.br
helpdesk.frostkrone.de
helpdesk.greenfood.nl
helpdesk.lac.hu
helpdesk.llyc.global
helpdesk.muratechnology.com
helpdesk.nauit.lt
helpdesk.porvairfiltration.com
helpdesk.sykesseafood.com
helpdesk.szallas.hu
helpdesk.taicalon.org
helpdesk.thermegroup.com
helpdesk.trinity.croydon.sch.uk
helpdesk.vandenbraembussche.be
hrdemo.servicedeskplus.nl
hubergroup-technicalservice.hubergroup.com
i-care.cybc.com.cy
ictservicedesk.bield.co.uk
it.5.sm.urusai.fun
itassist.harrowschool.org.uk
itdesk.solargis.com
ithelpdesk.hatsgroup.com
ithelpdesk.ocugroup.com
itservice.roxcel.com
itservicedesk.emhartglass.com
itservicedesk.highdorn.co.uk
itservicedesk.visualfabriq.com
itsm.dopplerschirme.com
itsupport.actibel.be
itsupport.bandmwaste.com
itsupport.bhtc.com
itsupport.kensa.co
itsupport.towapharmaceutical.com
kitt.kpark.fr
newservicedesk.mi-hub.co.uk
sdp.hja.net
sdpod.set3solutions.co
sdpondemand.monumentregroup.com
service-desk.bedfordgirlsschool.co.uk
service.myspock.work
servicedesk.ambient.org.uk
servicedesk.amiculum.biz
servicedesk.avo-adam.com
servicedesk.bailygarner.co.uk
servicedesk.cerealis.pt
servicedesk.cplaromas.com
servicedesk.durbinglobal.com
servicedesk.endrich.com
servicedesk.firstline.co.uk
servicedesk.grupaeurocash.pl
servicedesk.gsfgroup.com
servicedesk.hapimag.com
servicedesk.homebase.co.uk
servicedesk.labbuit.it
servicedesk.lumanity.com
servicedesk.maccresi.com
servicedesk.martico.com
servicedesk.mi-hub.co.uk
servicedesk.minetta.gr
servicedesk.monaghancoco.ie
servicedesk.moredun.ac.uk
servicedesk.phmg.com
servicedesk.pyrex-cookware.eu
servicedesk.screenworks.co.uk
servicedesk.slatergordon.uk
servicedesk.somersetft.nhs.uk
servicedesk.tfgm.com
servicedesk.tkf.nl
servicedeskplus.thg.com
servicedesks.notts-fire.gov.uk
servicerequest.sapref.com
sg.grwpcynefin.org
sistemas.grupo5.net
support.bong.com.pl
support.frewitt.com
support.neechamber.co.uk
support.seddons.co.uk
support.sysco.uk.com
tickets.hearst.nl
tjenester.bir.no

Other certificates including the domain name nauit.lt

(limited to 100 certificates)
servicedesk.monaghancoco.ie
pomoc.lekam.pl
servicedesk.monaghancoco.ie
pomoc.lekam.pl
helpdesk.nauit.lt
helpdesk.nauit.lt
servicedesk.monaghancoco.ie

Certificate

The complete raw certificate details for helpdesk.nauit.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIgRKfyIfS7dlYERdMuu
C4lTH5Hs16YQUzDXE9c228cp9kx/edt4do7lGWfZcQgMzuXMr4R8ewfwAqPz06sR
y2dT7bKijphGHJc7ofsIKT5I2xk/Ptn0lnm9nld2EnU/f/5jsZuaXtnHqnuhn7Kk
87NX/ybdyGBrD9LaE+LPo2dFyXEzv+Ho2oijtIZkRGC3IvHYH3LvT/v3BaLzu7JY
tCVSpW2X9O7wsjA6fS8LZX5fOS++BH1YbNU737I+fGM8Mx7DU0qjW4hiX5jBj6RT
vsnBainKmmA2htC90J+8jUR3aqNO6TUavzL74jAl97l4Mq9DoQ7wix1j/WSiDbnA
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356401360337241726036200729850143914841804
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 08:51:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 08:51:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.nauit.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23294945275332799347765292216521619573962464311768946844825116512756017098922516465477722264374490574532546340814973955585521333536426044401794543168770317749021146887686338909780003238502064686093358767157379243376849780028854775121116444188353916002299079917301239728564056906476664614423573968943207441786081317169523117024645169941123278176540856424661975640820637349504925461751504983354449739726547612391852231832839485319741729142794045062803420496064314111532322207504199294080986141226297352060582522054429695865806784160084613980253535691461405728789203942163694317256190416923327535025874493490339025371159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b2aa1c9c21e9155221f755894106343e123cb11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.servicedeskplus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsghelpdesk.deeset.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.idowa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sch1584.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.thereader.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.aldaholding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.alivetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.cartrawler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.commit.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.cysec.gov.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.flashengenharia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.frostkrone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.greenfood.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.lac.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.llyc.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.muratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.nauit.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.porvairfiltration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.sykesseafood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.szallas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.taicalon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.thermegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.trinity.croydon.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.vandenbraembussche.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrdemo.servicedeskplus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubergroup-technicalservice.hubergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-care.cybc.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ictservicedesk.bield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.5.sm.urusai.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itassist.harrowschool.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itdesk.solargis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.hatsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.ocugroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservice.roxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.emhartglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.highdorn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservicedesk.visualfabriq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsm.dopplerschirme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.actibel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.bandmwaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.bhtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.kensa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.towapharmaceutical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitt.kpark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newservicedesk.mi-hub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdp.hja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdpod.set3solutions.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdpondemand.monumentregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-desk.bedfordgirlsschool.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.myspock.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ambient.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.amiculum.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.avo-adam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.bailygarner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.cerealis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.cplaromas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.durbinglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.endrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.firstline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.grupaeurocash.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.gsfgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.hapimag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.homebase.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.labbuit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.lumanity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.maccresi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.martico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.mi-hub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.minetta.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.monaghancoco.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.moredun.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.phmg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.pyrex-cookware.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.screenworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.slatergordon.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.somersetft.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.tfgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.tkf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedeskplus.thg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesks.notts-fire.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicerequest.sapref.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.grwpcynefin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemas.grupo5.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bong.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.frewitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.neechamber.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.seddons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sysco.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hearst.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjenester.bir.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b37e5efb60000040300473045022100e42df09583ceede87e2ba65803d88c7bd803397b690f936a171cc52fc8a22f3802201e70a7ba89edca72813f737e13a0bedf4673eed91548e07154e03c8ecef879a0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b37e5eff00000040300463044022048eb58ced8bdab880ec781e4f5c6eb2f2a58f0371a4e54f02832ab2dee491abd0220128bffdf01cc7325b48da4bf145e9fa1ca45e11bbdb7d605a57abb56fb40af75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096da0edd47dd7cc505ee9e1a38514c6739c997c733dc1dd9d8335f950233d39f87c165fd845273e2dd9282c6094f12be80c63f00e6cdb190855fd6d42685fc912da2683616894d2ab624ede9175ecff2c61f41e88bbd1bae1ff044bddbbda3c0d50064440ac99e35f41cb7783bc2e04f7035813e77169953cd1b8f6a05838d8999957560136b3779b38612b3dd8db214896aaca9b92813de743647486035a0491bfec23dd2612bee917e43f9ae3fb08f5cb0673eebf9cbc4519a4634bc7bfec275f9768fc5b1d9c6a3cc48ceb7024f7b278b8af82cfda3b62a6cecdfd84a5dda01600487edc83d271a1c5fa5b585e6cc47e596402bade5fc539ecef47f88cf25