support.zalman-it.de

Issued by R3

About this certificate

This digital certificate with serial number 04:24:12:ea:21:97:35:35:ba:f3:5c:39:41:f0:b2:9d:9b:bc was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.zalman-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:12:ea:21:97:35:35:ba:f3:5c:39:41:f0:b2:9d:9b:bc
Serial Number (int): 360724450718883234028151808410666126908348
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:4f:71:27:97:37:4b:fb:0f:94:9c:63:5c:98:06:c1:b8:38:6b:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:18:03:21:73:53:3a:a1:d6:af:69:84:c1:7e:b7:75:c0:2f:46:8d
Fingerprint (sha256): af:66:ce:28:64:9c:f1:ed:c1:2e:99:e1:b9:d9:54:62:74:9d:01:9f:e8:7d:1e:5c:7b:27:84:f7:df:51:77:b3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.zalman-it.de

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.zalman-it.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assistenza.amicachips.it
assistenza.luca24.it
assistenza.ordini24.com
assistenza.prodottitipici.it
care.cbmc.nl
demandedf.suder.fr
desk.entrance-robotics.de
help.cintra.co.uk
help.clousale.com
help.displax.com
help.globalpaymentcard.ch
help.moviik.com
help.paymentsolutionandservice.com
help.prestigetelecomgroup.co.uk
help.sprinthero.com
help.tinybots.nl
help.winmaxnet.com
helpcentrum.medixs.nl
helpdesk.creative-network.co.uk
helpdesk.dataroad.pt
helpdesk.fsis.dk
helpdesk.gerber-netcom.ch
helpdesk.inspiration-healthcare.com
helpdesk.leventhorpe.net
helpdesk.polyright.com
helpdesk.privateproperty.co.za
helpdesk.prodress.de
helpdesk.rezcontrol.com
helpdesk.teqz.nl
hvsupport.naturalpower.com
internal.servicedesk.khaoscontrol.com
investment.workclubhq.com
ivsupport.fleetoperations.co.uk
kccprojects.servicedesk.khaoscontrol.com
noonacademy.becrypt.com
podpora.construction.sk
produccion.beldallorens.com
service.farmlyplace.com
servicedesk.fmh.ch
sinaxiahelp.younicorns.io
soporte.foqumread.com
soporte.promede.com
strega.support.ignitehospitality.com
support.accessy.se
support.adshares.net
support.airdial.co.uk
support.at.bertha.app
support.bi4controlling.com
support.bool.ie
support.cfxquantum.com
support.cobaltbeach.com
support.easy2play.fr
support.enaweg.at
support.eurocommand.com
support.europarkingservices.com
support.fixsus.be
support.forexyestrading.com
support.gelship.com
support.genialcompliance.com
support.globalpos.fr
support.la-gec.com
support.lux.bertha.app
support.medlive.pt
support.mydre.org
support.nl.bertha.app
support.onlinevakman.com
support.orandke.com
support.ormicloud.com
support.profitfarm.it
support.raigmoreconnect.co.uk
support.regenwasser.com
support.safetech.co.uk
support.seetickets.ch
support.sellable.app
support.sim-spiecn.fr
support.smartsiam.com
support.smcit.co.za
support.technis.com
support.tradedu.com
support.vitisevents.com
support.webandappstudio.com
support.yasido.com
support.ymer.it
support.yunatech.co.uk
support.zalman-it.de
supporto.tennisvalla.it
supportportal.dekkersit.com
testing.advance-he.ac.uk
ticket.swiss-prime.ch

Other certificates including the domain name zalman-it.de

(limited to 100 certificates)
support.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de

Certificate

The complete raw certificate details for support.zalman-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEes3i7hD60CHvoMFJkmx9KqAsaUHW
UZFzmtLZFrSigazcsYS5QJHumPe1L3p+TJ7pSIH0Yqh0Gxh4YHiYLliFtQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360724450718883234028151808410666126908348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 02:08:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 02:08:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.zalman-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047acde2ee10fad021efa0c149926c7d2aa02c6941d65191739ad2d916b4a281acdcb184b94091ee98f7b52f7a7e4c9ee94881f462a8741b18786078982e5885b5
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							234f712797374bfb0f949c635c9806c1b8386b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.amicachips.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.luca24.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.ordini24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.prodottitipici.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.cbmc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandedf.suder.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.entrance-robotics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.cintra.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clousale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.displax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.globalpaymentcard.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.moviik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paymentsolutionandservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.prestigetelecomgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sprinthero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.tinybots.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.winmaxnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcentrum.medixs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.creative-network.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.dataroad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.fsis.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gerber-netcom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.inspiration-healthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.leventhorpe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.polyright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.privateproperty.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.prodress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.rezcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.teqz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvsupport.naturalpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.servicedesk.khaoscontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment.workclubhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivsupport.fleetoperations.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccprojects.servicedesk.khaoscontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noonacademy.becrypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podpora.construction.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produccion.beldallorens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.farmlyplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.fmh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinaxiahelp.younicorns.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.foqumread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.promede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strega.support.ignitehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.accessy.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.adshares.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.airdial.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.at.bertha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bi4controlling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bool.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cfxquantum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cobaltbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.easy2play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.enaweg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.eurocommand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.europarkingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fixsus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.forexyestrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gelship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.genialcompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.globalpos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.la-gec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lux.bertha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.medlive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mydre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nl.bertha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.onlinevakman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.orandke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ormicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.profitfarm.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.raigmoreconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.regenwasser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.safetech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.seetickets.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sellable.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sim-spiecn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.smartsiam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.smcit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.technis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tradedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.vitisevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.webandappstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yasido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ymer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yunatech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zalman-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.tennisvalla.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportportal.dekkersit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.advance-he.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.swiss-prime.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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