support.okra.ng

Issued by R3

About this certificate

This digital certificate with serial number 04:f8:90:67:2e:cd:ac:a1:c6:40:87:a1:35:d4:2c:24:b5:a8 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=support.okra.ng

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f8:90:67:2e:cd:ac:a1:c6:40:87:a1:35:d4:2c:24:b5:a8
Serial Number (int): 433031115310689224576722573907138227516840
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:01:26:f2:43:3a:46:2f:02:f1:39:ee:01:af:2d:29:fd:dd:a4:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:75:01:57:f2:66:3f:44:9b:2a:38:b1:e0:87:05:d3:72:4e:a7:c3
Fingerprint (sha256): 86:c1:3b:b0:45:87:e3:3a:8a:fa:68:11:9f:af:ae:5b:30:50:a5:71:53:b9:b7:9c:27:ef:40:db:37:7c:31:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.okra.ng

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.okra.ng

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aml-support.edaat.sa
ask.getshapely.com
atendimento.ergonsistemas.com.br
ayuda.magichairoficial.com.co
claroty.inflowtechnologies.in
contacts.tkey.org
desk-horiba.oniwa.co.jp
desk-kiso-toymuseum.oniwa.co.jp
desk.cloud-converters.com
desk.extrainch.co.ke
desk.transmosis.com
destek.pt.com.tr
elosupport.ou.edu.vn
emspsupport.etstechcafe.com
extrahop.inflowtechnologies.in
financeservice.cclswi.org
help.99saasaving.com
help.actionlink.com
help.cp-commerce.com
help.epic36.com
help.hurb.com
help.knvsol.com
help.ordant.com
help.qntrl.com
help.stoneprism.com
help.webspecia.in
help.wsatraining.com
helpdesk.bridgedatacentres.com
helpdesk.itguru.solutions
helpdesk.valorglobal.com
hrhelpdesk.pdtmc.com
hrservice.cclswi.org
ilantus.inflowtechnologies.in
maintenanceservice.cclswi.org
mysupport.mybexa.com
netscout.inflowtechnologies.in
p2.0.circlegroup.com.my
scholars.isacindia.org
sdesk.b-able.dk
sg.support.te-cloud.advantest.com
soporte.arquiluz.studio
soporte.datoseguro.co
soporte.elery.co
soporte.fundacionparatodos.com
soporte.itpgdl.com.mx
soporte.solucionait.es
support-intl-test-only.shijigroup.com
support-teacher.weblio.jp
support.1rink.com
support.1voicetech.com
support.aesir-corp.com
support.amerinatls.com
support.anu-biz.com
support.avantisai.com
support.basic.am
support.bluecap.ai
support.conpulse.io
support.enlitic.com
support.epigrid.com
support.imm-cs.com
support.incrementic.com
support.infinitesignage.com
support.linedrift.com
support.manchigroup.com
support.menred.com
support.newzdash.com
support.noisenet.com.au
support.okra.ng
support.osmosvote.com
support.promedsi.com
support.promoshopla.com
support.qonsult.io
support.rfwel.com
support.sisoy.id
support.sitestorm.cloud
support.survisiongroup.com
support.synergysquaredinc.com
support.tayosolution.ca
support.tghgv.net
support.trumbocorp.com
support.vicoimaging.com
support.webarchitect.net
support.weddingexposaustralia.com
tenable.inflowtechnologies.in
thibidi.citek.vn
tmc.support.actionkpi.com
vms.myeg.com.my
western.support.actionkpi.com
www.patolo.jp
www.synergyhelps.com

Other certificates including the domain name okra.ng

(limited to 100 certificates)
okra.ng
capture.okra.ng
okr.to
dashboard.okra.ng
support.okra.ng
staging.okra.ng
dashboard.okra.ng
demo-dev.okra.ng
staging-dashboard.okra.ng
docs.okra.ng
bourne-status.wifinity.net
bourne-status.wifinity.net
okra.ng
dev-dashboard.okra.ng
dev.okra.ng
cdn.okra.ng
demo-dev.okra.ng
okra.ng
okr.to
dev-api.okra.ng
demo.okra.ng
widget.okra.ng
okra.ng
cdn.okra.ng
okra.ng
dev-dashboard.okra.ng
staging-api.okra.ng
okra.ng
okra.ng
get.okra.ng
staging-api.okra.ng
bourne-status.wifinity.net
okra.ng
get.okra.ng
bourne-status.wifinity.net
app-test.okra.ng
staging.okra.ng
support.okra.ng
okra.ng
dev-status.okra.ng
demo.okra.ng
dev-api.okra.ng
bourne-status.wifinity.net
staging.okra.ng
dev.okra.ng
dev-dashboard.okra.ng
staging.okra.ng
bourne-status.wifinity.net
widget.okra.ng
bourne-status.wifinity.net
bourne-status.wifinity.net
dev-api.okra.ng
support.okra.ng
dev-api.okra.ng
dashboard.okra.ng
bourne-status.wifinity.net
staging-dashboard.okra.ng
dev-cdn.okra.ng
staging-api.okra.ng
dev.okra.ng
dashboard.okra.ng
docs.okra.ng
widget.okra.ng
demo-dev.okra.ng
dev-dashboard.okra.ng
okra.ng
dev.okra.ng
staging-api.okra.ng
dash.okra.ng
demo-dev.okra.ng
dev.okra.ng
okra.ng
debug.okra.ng
staging-dashboard.okra.ng
dev-api.okra.ng
okra.ng
docs.okra.ng
bourne-status.wifinity.net
demo.okra.ng
okra.ng
bourne-status.wifinity.net
demo.okra.ng
dash.okra.ng
demo-dev.okra.ng
okra.ng
bourne-status.wifinity.net

Certificate

The complete raw certificate details for support.okra.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEty6XeaJwL42zzRjieUfLyF6n483e
v/rwz+EtZP/+fwjSyYOk21D4tx+H977/UjB1mqfBjxlryMC6iOsP0WFtig==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433031115310689224576722573907138227516840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 01:48:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 01:48:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.okra.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b72e9779a2702f8db3cd18e27947cbc85ea7e3cddebffaf0cfe12d64fffe7f08d2c983a4db50f8b71f87f7beff5230759aa7c18f196bc8c0ba88eb0fd1616d8a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce0126f2433a462f02f139ee01af2d29fddda4bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aml-support.edaat.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.getshapely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atendimento.ergonsistemas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.magichairoficial.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claroty.inflowtechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.tkey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk-horiba.oniwa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk-kiso-toymuseum.oniwa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.cloud-converters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.extrainch.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.transmosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destek.pt.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elosupport.ou.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emspsupport.etstechcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extrahop.inflowtechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeservice.cclswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.99saasaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.actionlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.cp-commerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.epic36.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.hurb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.knvsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ordant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.qntrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stoneprism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.webspecia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wsatraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.bridgedatacentres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.itguru.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.valorglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrhelpdesk.pdtmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrservice.cclswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilantus.inflowtechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenanceservice.cclswi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysupport.mybexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscout.inflowtechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2.0.circlegroup.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholars.isacindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdesk.b-able.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.support.te-cloud.advantest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.arquiluz.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.datoseguro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.elery.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.fundacionparatodos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.itpgdl.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.solucionait.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-intl-test-only.shijigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-teacher.weblio.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.1rink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.1voicetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.aesir-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.amerinatls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.anu-biz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.avantisai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.basic.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bluecap.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.conpulse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.enlitic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.epigrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.imm-cs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.incrementic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.infinitesignage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.linedrift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.manchigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.menred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.newzdash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.noisenet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.okra.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.osmosvote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.promedsi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.promoshopla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.qonsult.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rfwel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sisoy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sitestorm.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.survisiongroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.synergysquaredinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tayosolution.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tghgv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.trumbocorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.vicoimaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.webarchitect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.weddingexposaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenable.inflowtechnologies.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thibidi.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmc.support.actionkpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.myeg.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'western.support.actionkpi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patolo.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.synergyhelps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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