assist.fusiongroupusa.com

Issued by R3

About this certificate

This digital certificate with serial number 04:42:ef:90:9f:e5:18:9c:a0:1d:be:0a:db:da:2d:4c:d0:73 was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=assist.fusiongroupusa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:42:ef:90:9f:e5:18:9c:a0:1d:be:0a:db:da:2d:4c:d0:73
Serial Number (int): 371226216368617142269053830096468822511731
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:f7:2a:a2:57:87:c4:b8:df:8a:1d:51:f7:ae:2c:0f:77:35:ba:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:36:cf:86:62:57:d4:44:3a:dd:4c:a4:24:66:a0:07:27:1d:83:55
Fingerprint (sha256): 88:17:4b:6c:14:3f:97:8e:a9:ec:af:3a:79:f9:19:6a:3f:2d:17:52:9d:09:26:1c:05:3f:c8:50:31:ee:72:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate assist.fusiongroupusa.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assist.fusiongroupusa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assist.aa-techs.com
assist.broxelbroadband.com
assist.cloudtitantech.com
assist.consultaremedios.com.br
assist.country.org
assist.crediblesystems.com
assist.crowndigitalconsulting.com
assist.ctp123.com
assist.cxtsoftware.com
assist.dcitech.org
assist.decodingit.com
assist.dipolediamond.com
assist.edgt.com
assist.ewmc.ca
assist.fusiongroupusa.com
assist.goavanto.com
assist.hvhospice.org
assist.intechnology.com.au
assist.itcloudglobal.com
assist.lawgicalinsight.com
assist.lcnb.com
assist.liveinspired.church
assist.menshealthclinic.com
assist.msic.org
assist.nmrevents.com
assist.omni-trade.com
assist.pandesco.biz
assist.protek.education
assist.reintivity.com
assist.smsi.group
assist.spirertech.com
assist.sureline.uk
assist.thebergroup.com
assist.themodernfirm.com
assist.tmssinc.com
assist.tsplus.me
assist.virtueit.com.au
assist.vox-link.net
help.hbmsu.ac.ae
help.ideazfirst.com
help.rubieraproductions.com
remote.alfamicro.com
remote.helixtech.us
remote.looppe.com
remote.mammoth-ai.com
remote.metallurgicalsupplies.com
support.101ti.com.mx
support.dontgethacked.ca
support.justiceworks.com
support.kbsinnovative.com
support.psplegal.ca
support.thecrmhouse.com.au

Other certificates including the domain name fusiongroupusa.com

(limited to 100 certificates)
social.sticknobill.com
support.psplegal.ca
ssl375094.cloudflaressl.com
ssl375094.cloudflaressl.com
remote.mammoth-ai.com
demo.zsocial.xyz
demo.zsocial.xyz
assist.fusiongroupusa.com
support.psplegal.ca
fusiongroupusa.com
social.sticknobill.com
sni192693.cloudflaressl.com
social.dignotion.com
social.sticknobill.com
demo.zsocial.xyz
assist.broxelbroadband.com
demo.zsocial.xyz
demo.zsocial.xyz
sni232756.cloudflaressl.com
assist.nmrevents.com
demo.zsocial.xyz
fusiongroupusa.com
ssl375094.cloudflaressl.com
demo.zsocial.xyz
demo.zsocial.xyz
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
ssl375092.cloudflaressl.com
ssl375094.cloudflaressl.com
assist.fusiongroupusa.com
ssl375093.cloudflaressl.com
assist.fusiongroupusa.com
fusiongroupusa.com
fusiongroupusa.com
demo.zsocial.xyz
ssl375093.cloudflaressl.com
assist.broxelbroadband.com
support.101ti.com.mx
assist.fusiongroupusa.com
sni192693.cloudflaressl.com
assist.fusiongroupusa.com
assist.broxelbroadband.com
ssl375093.cloudflaressl.com
ssl375094.cloudflaressl.com
social.dignotion.com
sni192693.cloudflaressl.com
fusiongroupusa.com
ssl339133.cloudflaressl.com
ssl339133.cloudflaressl.com
fusiongroupusa.com
demo.zsocial.xyz
demo.zsocial.xyz
assist.smsi.group
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
assist.fusiongroupusa.com
assist.thebergroup.com
ssl375092.cloudflaressl.com
ssl375094.cloudflaressl.com
assist.fusiongroupusa.com
ssl375093.cloudflaressl.com
assist.edgt.com
assist.smsi.group
fusiongroupusa.com
fusiongroupusa.com
fusiongroupusa.com
ssl375092.cloudflaressl.com
social.dignotion.com
ssl375094.cloudflaressl.com
demo.zsocial.xyz
assist.aa-techs.com
vps.fusiongroupusa.com
help.rubieraproductions.com
assist.dipolediamond.com
ssl375093.cloudflaressl.com
ssl375094.cloudflaressl.com
vps.fusiongroupusa.com
ssl375094.cloudflaressl.com
ssl375093.cloudflaressl.com
assist.smsi.group
fusiongroupusa.com
ssl375094.cloudflaressl.com
demo.zsocial.xyz
fusiongroupusa.com
assist.reintivity.com
assist.fusiongroupusa.com
assist.fusiongroupusa.com
assist.edgt.com
demo.zsocial.xyz
assist.fusiongroupusa.com
ssl375092.cloudflaressl.com
demo.zsocial.xyz
server.fusiongroupusa.com
assist.thebergroup.com
ssl375093.cloudflaressl.com

Certificate

The complete raw certificate details for assist.fusiongroupusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoobQllI5iGGIqlfBICIw
rZErbM4PHzvSTgOWZGheAnc49doEJ8hAViQyemX2TviPVsQ0KRQGfFyoV8u0GfEe
ZNEGR46VOZZRzdbPvoy98DezEkT0HfnThWXkKY3kHpDZAPdmLtijepVPXb2KMbLO
WPesYTpacyKyRzSu0ODgKzspgDg9+qSxRnvLfCPILkKDpnT0Mk+A5PU+sNG/atLO
PI9zzNwTMTRdYjSt1B2vlYb66rfsEzRb3Q2oBcIxLfmuBnsAWbNWxwDK7m898ksB
yaafbhztx1xnqxLkKD+RK/jO5zuQDSrD2/eEB0Z10rIE7cRbGwrrXb6AYbdH816R
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371226216368617142269053830096468822511731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 16:39:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 16:39:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assist.fusiongroupusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20517085057015081869802514903624472223672146086596267557662306236876441497174678390785188527551743430192119918529259833954608624808265324697264993603757837171857834226185365501092519202375627410137972016180537596422958795421449967509879395443314191754881276216783578179318770525861622167511089230019335669256047868046438988816899313906486892773513172591468639222279822192831734781884549702796525137884233422700625429202124918934810869658273833332362701146138432767486767442494915083507655877001975054550065033056781639746812807567147751653381122454854576645949027695907812526409265638046249068009171502698788070265291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1f72aa25787c4b8df8a1d51f7ae2c0f7735ba96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.aa-techs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.broxelbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.cloudtitantech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.consultaremedios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.country.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.crediblesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.crowndigitalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.ctp123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.cxtsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.dcitech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.decodingit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.dipolediamond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.edgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.ewmc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.fusiongroupusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.goavanto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.hvhospice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.intechnology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.itcloudglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.lawgicalinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.lcnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.liveinspired.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.menshealthclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.msic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.nmrevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.omni-trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.pandesco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.protek.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.reintivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.smsi.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.spirertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.sureline.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.thebergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.themodernfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.tmssinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.tsplus.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.virtueit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assist.vox-link.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.hbmsu.ac.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ideazfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.rubieraproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.alfamicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.helixtech.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.looppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.mammoth-ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.metallurgicalsupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.101ti.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dontgethacked.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.justiceworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kbsinnovative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.psplegal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.thecrmhouse.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7238a187000004030047304502202c9f7269469b7a61da2388f1ac28448e04b8b5be2c262282e27a6ef32e4d92be022100d11f39e6573f128eb4e62b7f562c794783ba6ff5f4ea7807d5a7ac96bf97ac1100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b7238a2460000040300483046022100ed6b97fcd3d50505bf7d0734e655fb73414ae1557ea21aaccaa99daa92b3f9e0022100c9fd6f80a2003a6df9834cf05bf08c6a0f6cfb55d371e9530eef0eeefeffba47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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