itsupport.studentaffairs.cmu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:ac:8f:8d:a1:4b:eb:10:2e:8e:63:6c:5c:09:43:fd:58 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itsupport.studentaffairs.cmu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:ac:8f:8d:a1:4b:eb:10:2e:8e:63:6c:5c:09:43:fd:58
Serial Number (int): 290490231569885269174151847378598595132760
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:62:09:0d:aa:8a:14:05:93:f0:e5:c7:cc:87:bc:da:e3:fc:49:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:96:83:79:9e:dc:40:00:2e:23:d3:ae:f5:9e:20:d9:d0:c8:0b:03
Fingerprint (sha256): 9b:ae:f0:4c:a4:28:9d:80:2d:bc:5f:55:5a:f4:54:62:2b:25:a4:31:c7:89:e5:d8:45:b1:7a:a7:40:a3:fa:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itsupport.studentaffairs.cmu.edu

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itsupport.studentaffairs.cmu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajusdsupport.ajusd.org
cloudsd.winner.ua
csc.sukarne.com
customer.dexperts.com.mx
fmd.tatweer.sa
helpdesk.ail.ca
helpdesk.bancamerica.com.do
helpdesk.ben.edu
helpdesk.biglakescounty.ca
helpdesk.candelamedical.com
helpdesk.countrypure.com
helpdesk.entertainment.com.au
helpdesk.mark-taylor.com
helpdesk.naa.edu
helpdesk.paperwrks.com
helpdesk.partsfortrucks.com
helpdesk.secureauth.com
helpdesk.teoxanesupport.com
helpdesk.traeger.com
helpdesk.wisestaffinggroup.com
helpdesk.yomagroup.io
ictservicedesk.mndassociation.org
imsdservicedesk.milwaukeecountywi.gov
isupport.nirogroup.com
it.qualitestgroup.com
ithelp.teri.res.in
ithelpdesk.palermospizza.com
itservices.top.edu.au
itsupport.kaufmancounty.net
itsupport.studentaffairs.cmu.edu
mysupport.akshayapatra.org
newhelpdesk.perrknight.com
portal.borsheims.com
rconnect.randstad.in
sedap.bhinnekalife.com
servicedesk.electronet.co.nz
servicedesk.ftdcorp.net
servicedesk.gmhec.org
servicedesk.ialr.org
servicedesk.jmmb.com
servicedesk.largnet.ca
servicedesk.myguardiangroup.com
servicedesk.odc.co.bw
servicedesk.ttcu.com
support.c53.io
support.kvernelandgroup.com
support.nothingbundtcakes.com
support.tagusa.com
support.winbrogroup.com
supportdesk.pmhschool.com
urservicedesk.scu.edu

Other certificates including the domain name cmu.edu

(limited to 100 certificates)
yellowstone.andrew.cmu.edu
dev-andyjr.enrollment.cmu.edu
test-web-lws.edu.help
www.soa.cmu.edu
sfunder5cert.net
admissions.scs.cmu.edu
oli.cmu.edu
ultron.srv.cs.cmu.edu
*.oli.cmu.edu
blockchain.cylab.cmu.edu
admissions.emeritus.org
it.qatar.cmu.edu
cluster3.technolutions.net
5746569068412928-fe1.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
www.architecture.cmu.edu
wtslocal2.srv.cs.cmu.edu
reporting.as.cmu.edu
csgapp.andrew.cmu.edu
apply.etc.cmu.edu
dvl-vhost-01.andrew.ad.cmu.edu
backend.academy.cs.cmu.edu
qtr-vdi-gtw-p01.qatar.cmu.edu
admission.qatar.cmu.edu
webhost.srv.cs.cmu.edu
cmu.stellic.com
5746569068412928-fe1.pantheonsite.io
innovation.cmu.edu
studentaid.cmu.edu
scsmydb2.andrew.cmu.edu
publishing.andrew.cmu.edu
esx-1.isri.cmu.edu
starrez-test.housing.cmu.edu
portal.cylab.cmu.edu
starrez-test.housing.cmu.edu
clusters2.andrew.cmu.edu
www.cmu.edu
ebstest.andrew.cmu.edu
puzzlehunt.club.cc.cmu.edu
test.eis.uw.edu
www.magazine.tepper.cmu.edu
shibboleth-test.andrew.cmu.edu
privacycert.cs.cmu.edu
citeak.multidevcom.uaf.edu
www.design-engineering.princeton.edu
mbrooks-dev.net.cmu.edu
illiad.library.cmu.edu
cluster3.technolutions.net
nxterra.ucop.edu
resources.ideate.cmu.edu
fractions.cs.cmu.edu
cardinaltetra.coral.cs.cmu.edu
wtslocal1.srv.cs.cmu.edu
5746569068412928-fe1.pantheonsite.io
rohan.andrew.cmu.edu
rich.srv.cs.cmu.edu
cluster2.technolutions.net
scalefunder.net
rubeus.fac.cs.cmu.edu
puzzlehunt.club.cc.cmu.edu
cms-dev4.andrew.cmu.edu
sfunder5cert.net
sc.isri.cmu.edu
ulissigroup.cheme.cmu.edu
pgh-ad-temp.go.ece.cmu.edu
5741830645743616-fe1.pantheonsite.io
tickets.its.cit.cmu.edu
www.hcii.cs.cmu.edu
spiral-web.ece.cmu.edu
www.blogs.earthjustice.org
qatar.webiso.andrew.cmu.edu
stills.andrew.cmu.edu
exchange.soa.cmu.edu
scom.andrew.cmu.edu
memexqa.cs.cmu.edu
clusters.andrew.cmu.edu
5741830645743616-fe1.pantheonsite.io
webdev.colorado.edu
virtual2.unlv.edu
research-pp.stonybrook.edu
tepper-aid.andrew.cmu.edu
architecture.cmu.edu
recruiting.tepper.cmu.edu
kitchingroup.cheme.cmu.edu
hotline.andrew.cmu.edu
garrod.isri.cmu.edu
upenn-it.asc.upenn.edu
ssp.australia.cmu.edu
forms.qatar.cmu.edu
15721.courses.cs.cmu.edu
tls.automattic.com
faculty.ce.cmu.edu
bookstore.web.cmu.edu
apply.tepper.cmu.edu
web.phys.cmu.edu
olr-test.as.cmu.edu
faculty.ce.cmu.edu
gitlab.library.cmu.edu
bd-test.andrew.cmu.edu

Certificate

The complete raw certificate details for itsupport.studentaffairs.cmu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+b2JlREkrjIgkDUzFv/
A31jW8jsT/7mAnr32n946HzbXtPTGZ1Z9cOzQaYlDpcWY6f7zBw4sVa9d9DPVGdJ
Kqq2xSPioQyAXM+n0hlJAbIxgGyVgZ3GYPeesteCRHLOZATfD5mf1Y9B7Mfmnx8c
t+MN8RcC1otxdCHJ9Xk7jlMWbjXmFRycijzXdduLpC02CsB8VSbxkrbBlLOKD/1q
KAtNAn5tafARbGPKqjuVYjzjVJjpK89HuXmFnkMTIbu+mRNxpowt8TnZvPI79oEP
kYPqQ6Xi+C4Mqtsb8UNTnwhnd+wfz+EsnK+eEC+kQyPaXMWcbMgy80xtUaJhFe40
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290490231569885269174151847378598595132760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 19:23:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 19:23:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itsupport.studentaffairs.cmu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25235314059709319616778318785993351100813401564804062902890942713899688356328401473493609718685414959139683366770564579902716656568463050116954315293815121302857516506850839142203649646475889978816770116748094276135890946532814618390491478070531848681966411677505035722819228719007688002533215229344486743447217591467141871147334553964032127317356896406438147313533995081361686007632497287575324918041850570945507579609766893087712733886895777435160624588705603159593666782487747611271540537224181453629943143939409314694034495528001188034347250931860230258957133338935047446200971723488371437953479432089657513227469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3462090daa8a140593f0e5c7cc87bcdae3fc49b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajusdsupport.ajusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsd.winner.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csc.sukarne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.dexperts.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmd.tatweer.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.bancamerica.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ben.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.biglakescounty.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.candelamedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.countrypure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.entertainment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.mark-taylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.naa.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.paperwrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.partsfortrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.teoxanesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.traeger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.wisestaffinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.yomagroup.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ictservicedesk.mndassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsdservicedesk.milwaukeecountywi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isupport.nirogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.qualitestgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelp.teri.res.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithelpdesk.palermospizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itservices.top.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.kaufmancounty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.studentaffairs.cmu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysupport.akshayapatra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhelpdesk.perrknight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.borsheims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rconnect.randstad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedap.bhinnekalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.electronet.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ftdcorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.gmhec.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ialr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.jmmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.largnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.myguardiangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.odc.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.ttcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.c53.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kvernelandgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nothingbundtcakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tagusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.winbrogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportdesk.pmhschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urservicedesk.scu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a6fea80a2000004030046304402203e6580eb865300f458d355370b276d2893c408c1b79e9d925d8d45ef196d4d8c02201d41aab28f8b8ff0260194a02017f6609ba4d88548d9e3010bf1b604fcc9db5600770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a6fea7eca0000040300483046022100a00c9a2f591a148d56e484cdea6fc9bd142a7389d7a9044bc398fd5c1d0e0eb302210085d587659407dfed9c10e67e5f96c24499eee9632f0e52f6d5d43b011b6474e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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