suporte.escritax.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:63:88:c3:c8:31:0f:4d:fc:f4:df:5f:16:68:ad:64:41:73 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=suporte.escritax.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:88:c3:c8:31:0f:4d:fc:f4:df:5f:16:68:ad:64:41:73
Serial Number (int): 295206603686136647923370188529704410300787
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:49:7d:ca:f7:b3:91:a4:4e:8a:7a:ca:7a:8d:42:87:ea:8c:6b:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bd:70:9c:ff:b1:9b:9e:7d:c3:ee:45:4b:d5:74:44:81:8e:1b:88:12
Fingerprint (sha256): 95:49:02:f1:b8:af:26:5c:96:dc:f1:36:52:54:c4:32:da:49:16:34:74:e5:5d:90:b5:df:9c:93:f3:52:fb:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate suporte.escritax.com.br

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suporte.escritax.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajuda.receitadigital.com
ayudarex.rexmas.com
care.toucango.net
cielosupport.applaudostudios.com
clientsuccess.suncommworld.com
crtb.coperbee.fr
cshelp.thesmstore.com
desk.blackid.app
desk.ghmc.com
desk.sbensonlegal.com
desk.vugis.co.za
eventos.ingresso.com
get.tcc.help
help.bolivia.roadtoultra.com
help.dlocal.com
help.fast.network
help.recoanywhere.com
help.sevenstaracademy.org
help.teachersolympiad.com
helpdesk.1stopinstall.com
helpdesk.kentik.com
helpdesk.trutech-me.com
helpdesk.yourtekpro.com
hr.luxerone.com
humancapital.tafaseel.ae
intern.netbee.ro
internal.symphonic.com
inv360.cyberit.co.il
kb.timewatch.co.il
partners.dailydeals242.com
pau2.upal.edu.pe
request.eleviamedia.com
rir.ingresso.com
sac.m8sistemas.com
sbomglobalsupport.softura.com
service.esure.ai
servicedesk.tccrew.co.za
soporte.ensancarlos.com
soporte.izeven.com
soporte.masin.co
soporte.onvopay.com
soporte.peruapps.com.pe
sup.ingresso.com
suporte.advaud.com.br
suporte.controladoria.digital
suporte.escritax.com.br
suporte.m8sistemas.com
suporte.tornera.com.br
support.akriviahcm.com
support.blacksheepmedia.co.uk
support.bolivia.roadtoultra.com
support.continuumads.com
support.coreproducts.ca
support.cyberguard360.com
support.dctechit.com
support.dotscribe.com
support.emrit.io
support.ez-erc.com
support.finlence.com
support.gigserv.com
support.grantapp.eu
support.hklighting.com
support.initova.com
support.ionconcertmedia.com
support.lumenave.com
support.luxrallytravel.com
support.mbpractice.com
support.metatactical.com
support.mindsize.com
support.nerdcom.do
support.nxa.tel
support.orthogonalcapital.com
support.qitsolutions.com
support.raytel.net
support.resistanceibiza.com
support.rgv.works
support.rmtcam.com
support.samgi.com
support.sensecapmx.com
support.strident.uk.com
support.tekup.org
support.tendercare.com
support.tevi.com
support.thecocktailmaker.com
support.tmc-india.in
support.tng.dev
support.xformative.cloud
support.zilmoney.com
tickets.onlinemarketing-zentrum.ch

Other certificates including the domain name escritax.com.br

(limited to 100 certificates)
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
suporte.escritax.com.br
escritax.com.br
www.escritax.com.br
suporte.escritax.com.br
sni.cloudflaressl.com
escritax.com.br
suporte.controladoria.digital
www.escritax.com.br
escritax.com.br
suporte.controladoria.digital
helpdesk.bhamtastic.com
sni.cloudflaressl.com
www.escritax.com.br
api.escritax.com.br
suporte.controladoria.digital
www.escritax.com.br
escritax.com.br
www.escritax.com.br
escritax.com.br
suporte.controladoria.digital
escritax.com.br
escritax.com.br
escritax.com.br
suporte.escritax.com.br
suporte.controladoria.digital
suporte.escritax.com.br
helpdesk.bhamtastic.com
suporte.controladoria.digital
www.escritax.com.br
escritax.com.br
helpdesk.avvaiyarpadasalai.org
suporte.controladoria.digital
escritax.com.br
escritax.com.br
escritax.com.br
www.escritax.com.br
helpdesk.bhamtastic.com
suporte.controladoria.digital
escritax.com.br
suporte.controladoria.digital
helpdesk.bhamtastic.com

Certificate

The complete raw certificate details for suporte.escritax.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkYMaxrDXkzTZx007DaZ
XIPuVYh5Hq4Etz12s+6wmgXkPdkyLj+UM8OpkntpDdso9Vvgn+G0E23etRSuGtpr
B4EwCq1mgE/sCC2k9hL3NrWr1sKjaDowC9uV0X4ugKNF6Ogb7gAuxOv2d1TEpx7l
Klj0ORcIu3SUBwfzj3U2qVGYcz5C3H2YXriMnVOgtzkA2mHscxxvEnH0412g26yy
7043v631vv+A27mMqJ4hTonp59SvbMjX6VhI2dW4kvXx5pvldT/QwVZ7Ipi9CRp7
FjALlN4oqjUhPCTT2vjlgmiBlQlr5rhkhnZJ4+TfkcU5geynQu9+EcjnGtAAXNvG
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295206603686136647923370188529704410300787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 23:06:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 23:06:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'suporte.escritax.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24524773370749818748845419692582365020456322822064581849166296213950765764877464720007546506944169578618550939728992581354393431320728581958958737654093526727449251303388224169364691200655024400833109653503607528856087585925006977020048788675065903096914515718095908872447976825688772315723037947913377053096128195809569991275708266560204119146370607499515948919743278986597518852293784677762259892799837480783000067123048466500456015421907048773867521093053997780571932214454065267908948174621232345790121580963896302045251590178486337084354358098630933272785118289349177918399216359604783397682416731752939917133509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35497dcaf7b391a44e8a7aca7a8d4287ea8c6b81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuda.receitadigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudarex.rexmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.toucango.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cielosupport.applaudostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsuccess.suncommworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crtb.coperbee.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cshelp.thesmstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.blackid.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.ghmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.sbensonlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.vugis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventos.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.tcc.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.bolivia.roadtoultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.dlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.fast.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.recoanywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sevenstaracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.teachersolympiad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.1stopinstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.kentik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.trutech-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.yourtekpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.luxerone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humancapital.tafaseel.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intern.netbee.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.symphonic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inv360.cyberit.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.timewatch.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.dailydeals242.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pau2.upal.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'request.eleviamedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rir.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.m8sistemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbomglobalsupport.softura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.esure.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.tccrew.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.ensancarlos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.izeven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.masin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.onvopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.peruapps.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sup.ingresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.advaud.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.controladoria.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.escritax.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.m8sistemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.tornera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.akriviahcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.blacksheepmedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bolivia.roadtoultra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.continuumads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.coreproducts.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cyberguard360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dctechit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dotscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.emrit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ez-erc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.finlence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gigserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.grantapp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hklighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.initova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ionconcertmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lumenave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.luxrallytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mbpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.metatactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mindsize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nerdcom.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nxa.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.orthogonalcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.qitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.raytel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.resistanceibiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rgv.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rmtcam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.samgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sensecapmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.strident.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tekup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tendercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.thecocktailmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tmc-india.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tng.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.xformative.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zilmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.onlinemarketing-zentrum.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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