itsupport.studentaffairs.cmu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b5:3c:ea:14:02:30:18:47:7c:be:60:e8:21:32:e5:b6:d8 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itsupport.studentaffairs.cmu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:3c:ea:14:02:30:18:47:7c:be:60:e8:21:32:e5:b6:d8
Serial Number (int): 323008935291004126959123974249616037492440
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:72:52:42:58:e2:f5:78:96:7c:24:cf:db:1b:e4:7c:3b:f9:1a:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:41:ed:96:a0:ce:1d:20:bf:f9:11:4f:61:bd:d6:2a:66:4f:6b:55
Fingerprint (sha256): 8a:d8:5d:5c:87:35:65:fc:87:df:c5:ec:8a:07:37:64:ed:06:ea:e6:2b:d4:08:01:14:29:39:8c:86:19:9f:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itsupport.studentaffairs.cmu.edu

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itsupport.studentaffairs.cmu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajusdsupport.ajusd.org
cloudsd.winner.ua
csc.sukarne.com
customer.dexperts.com.mx
fmd.tatweer.sa
helpdesk.ail.ca
helpdesk.bancamerica.com.do
helpdesk.ben.edu
helpdesk.biglakescounty.ca
helpdesk.candelamedical.com
helpdesk.countrypure.com
helpdesk.entertainment.com.au
helpdesk.mark-taylor.com
helpdesk.naa.edu
helpdesk.paperwrks.com
helpdesk.partsfortrucks.com
helpdesk.secureauth.com
helpdesk.teoxanesupport.com
helpdesk.traeger.com
helpdesk.wisestaffinggroup.com
helpdesk.yomagroup.io
ictservicedesk.mndassociation.org
imsdservicedesk.milwaukeecountywi.gov
isupport.nirogroup.com
it.qualitestgroup.com
ithelp.teri.res.in
ithelpdesk.palermospizza.com
itservices.top.edu.au
itsupport.kaufmancounty.net
itsupport.studentaffairs.cmu.edu
mysupport.akshayapatra.org
newhelpdesk.perrknight.com
portal.borsheims.com
rconnect.randstad.in
sedap.bhinnekalife.com
servicedesk.electronet.co.nz
servicedesk.ftdcorp.net
servicedesk.gmhec.org
servicedesk.ialr.org
servicedesk.largnet.ca
servicedesk.myguardiangroup.com
servicedesk.odc.co.bw
servicedesk.ttcu.com
support.c53.io
support.kvernelandgroup.com
support.nothingbundtcakes.com
support.tagusa.com
support.winbrogroup.com
supportdesk.pmhschool.com
urservicedesk.scu.edu

Other certificates including the domain name cmu.edu

(limited to 100 certificates)
yellowstone.andrew.cmu.edu
dev-andyjr.enrollment.cmu.edu
test-web-lws.edu.help
www.soa.cmu.edu
sfunder5cert.net
admissions.scs.cmu.edu
oli.cmu.edu
ultron.srv.cs.cmu.edu
*.oli.cmu.edu
blockchain.cylab.cmu.edu
admissions.emeritus.org
it.qatar.cmu.edu
cluster3.technolutions.net
5746569068412928-fe1.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
www.architecture.cmu.edu
wtslocal2.srv.cs.cmu.edu
reporting.as.cmu.edu
csgapp.andrew.cmu.edu
apply.etc.cmu.edu
dvl-vhost-01.andrew.ad.cmu.edu
backend.academy.cs.cmu.edu
qtr-vdi-gtw-p01.qatar.cmu.edu
admission.qatar.cmu.edu
webhost.srv.cs.cmu.edu
cmu.stellic.com
5746569068412928-fe1.pantheonsite.io
innovation.cmu.edu
studentaid.cmu.edu
scsmydb2.andrew.cmu.edu
publishing.andrew.cmu.edu
esx-1.isri.cmu.edu
starrez-test.housing.cmu.edu
portal.cylab.cmu.edu
starrez-test.housing.cmu.edu
clusters2.andrew.cmu.edu
www.cmu.edu
ebstest.andrew.cmu.edu
puzzlehunt.club.cc.cmu.edu
test.eis.uw.edu
www.magazine.tepper.cmu.edu
shibboleth-test.andrew.cmu.edu
privacycert.cs.cmu.edu
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
mbrooks-dev.net.cmu.edu
illiad.library.cmu.edu
cluster3.technolutions.net
nxterra.ucop.edu
resources.ideate.cmu.edu
fractions.cs.cmu.edu
cardinaltetra.coral.cs.cmu.edu
wtslocal1.srv.cs.cmu.edu
5746569068412928-fe1.pantheonsite.io
rohan.andrew.cmu.edu
rich.srv.cs.cmu.edu
cluster2.technolutions.net
scalefunder.net
rubeus.fac.cs.cmu.edu
puzzlehunt.club.cc.cmu.edu
cms-dev4.andrew.cmu.edu
sfunder5cert.net
sc.isri.cmu.edu
ulissigroup.cheme.cmu.edu
pgh-ad-temp.go.ece.cmu.edu
5741830645743616-fe1.pantheonsite.io
tickets.its.cit.cmu.edu
www.hcii.cs.cmu.edu
spiral-web.ece.cmu.edu
www.blogs.earthjustice.org
qatar.webiso.andrew.cmu.edu
stills.andrew.cmu.edu
exchange.soa.cmu.edu
scom.andrew.cmu.edu
memexqa.cs.cmu.edu
clusters.andrew.cmu.edu
5741830645743616-fe1.pantheonsite.io
webdev.colorado.edu
virtual2.unlv.edu
research-pp.stonybrook.edu
tepper-aid.andrew.cmu.edu
architecture.cmu.edu
recruiting.tepper.cmu.edu
kitchingroup.cheme.cmu.edu
hotline.andrew.cmu.edu
garrod.isri.cmu.edu
upenn-it.asc.upenn.edu
ssp.australia.cmu.edu
forms.qatar.cmu.edu
15721.courses.cs.cmu.edu
tls.automattic.com
faculty.ce.cmu.edu
bookstore.web.cmu.edu
apply.tepper.cmu.edu
web.phys.cmu.edu
olr-test.as.cmu.edu
faculty.ce.cmu.edu
gitlab.library.cmu.edu
bd-test.andrew.cmu.edu

Certificate

The complete raw certificate details for itsupport.studentaffairs.cmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ep3uE603wH2ILmYsZap
NnFoR9WpEo8RvO4EYrO/rmJLe+o/Fbhw1R8tswcotCct//cIu3ED0VzXHGkY8nk+
1qdr2xRNPsE9j4SesAja1Yl+oFiY3NHidhO3/zQ34CNEoPQGi2qAEU8pWF8pFsDb
m2nADCeK+jwg0zUiTYshOAJRsBYrs95VSVzv5CAx5cgmyX9yEuNU1w3t+ohVLCxn
14XDrYyVqfvS0dSjzkFHs3Vqhkd9gvJOXFUKCzjq/V7WQAmlUDgtCoahWZHCSxHH
7vvQh2qTysJnb08qtOwVGD+BEBXuVUL1ZBzpyN1SEpuGuRrjzNTseTpDjB4nPfxd
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323008935291004126959123974249616037492440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 17:22:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 17:22:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itsupport.studentaffairs.cmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26799242022631051771241265036872456906854075859383645934531683748314416864748274358121102399367549120605570637421871612708505676816851317667538860845738804229925896324592568035153371078721399617876759388874758457940625636201885154342711067960442755105007011224218611485645228177431473682227973534953487626070188328564260250576740882367400633341305108585106947424854236825703119934518591387980069105077642194639484198714075872515862983457919564763327849574596747155572669269431966259697974036088599222506259400751851833326915182108488883133578698983146533254493958907859722869244701805963241244734374592354295008222691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0672524258e2f578967c24cfdb1be47c3bf91a27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajusdsupport.ajusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsd.winner.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.sukarne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.dexperts.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmd.tatweer.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.bancamerica.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ben.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.biglakescounty.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.candelamedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.countrypure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.entertainment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.mark-taylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.naa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.paperwrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.partsfortrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.teoxanesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.traeger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wisestaffinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.yomagroup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ictservicedesk.mndassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsdservicedesk.milwaukeecountywi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isupport.nirogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.qualitestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelp.teri.res.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.palermospizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.top.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.kaufmancounty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.studentaffairs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysupport.akshayapatra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhelpdesk.perrknight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.borsheims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rconnect.randstad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedap.bhinnekalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.electronet.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ftdcorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.gmhec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ialr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.largnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.myguardiangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.odc.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ttcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.c53.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kvernelandgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nothingbundtcakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tagusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.winbrogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportdesk.pmhschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urservicedesk.scu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a5ae2222b0000040300483046022100ee9efb394618e65ad0d5cbc4228b1f77f1cfa7a9609dbd55f82100ede61c6588022100f02b594afb5ef9f1855a6912104fa7918aa641f6eb84cc79a5df0aa6413393b200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a5ae224220000040300473045022100ba2981a0f4558c0905447491eb7c39cc0116a6d7744a5269d8a0d52ad3b67ed102205b4e4e828d73d16e37558655f4c1b8552fd73d0d16e85feb6488db3454c8f369
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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