support.zalman-it.de

Issued by R3

About this certificate

This digital certificate with serial number 03:dc:fa:f1:d0:dc:2c:89:db:51:75:d3:7a:f6:50:21:95:93 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.zalman-it.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:fa:f1:d0:dc:2c:89:db:51:75:d3:7a:f6:50:21:95:93
Serial Number (int): 336532541096561515075154504879444806702483
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:c0:84:95:fb:bf:dc:b2:2f:8f:ee:03:f5:34:65:44:31:3c:5b:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fb:62:73:0a:21:0d:77:4d:be:69:a5:6b:cb:18:55:ea:2d:87:4f:cf
Fingerprint (sha256): c8:d7:81:c5:35:49:90:d2:75:25:01:99:64:64:db:81:2f:5f:15:e9:d9:1d:75:a4:a0:30:f6:b1:3c:af:8b:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate support.zalman-it.de

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.zalman-it.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assistenza.amicachips.it
assistenza.luca24.it
assistenza.ordini24.com
assistenza.prodottitipici.it
care.cbmc.nl
demandedf.suder.fr
desk.entrance-robotics.de
help.cintra.co.uk
help.clousale.com
help.displax.com
help.globalpaymentcard.ch
help.moviik.com
help.paymentsolutionandservice.com
help.prestigetelecomgroup.co.uk
help.sprinthero.com
help.tinybots.nl
help.winmaxnet.com
helpcentrum.medixs.nl
helpdesk.creative-network.co.uk
helpdesk.dataroad.pt
helpdesk.fsis.dk
helpdesk.gerber-netcom.ch
helpdesk.inspiration-healthcare.com
helpdesk.leventhorpe.net
helpdesk.polyright.com
helpdesk.privateproperty.co.za
helpdesk.prodress.de
helpdesk.rezcontrol.com
helpdesk.teqz.nl
hvsupport.naturalpower.com
internal.servicedesk.khaoscontrol.com
investment.workclubhq.com
ivsupport.fleetoperations.co.uk
kccprojects.servicedesk.khaoscontrol.com
noonacademy.becrypt.com
podpora.construction.sk
produccion.beldallorens.com
service.farmlyplace.com
servicedesk.fmh.ch
sinaxiahelp.younicorns.io
soporte.foqumread.com
soporte.promede.com
strega.support.ignitehospitality.com
support.accessy.se
support.adshares.net
support.airdial.co.uk
support.at.bertha.app
support.bi4controlling.com
support.bool.ie
support.cfxquantum.com
support.cobaltbeach.com
support.easy2play.fr
support.enaweg.at
support.eurocommand.com
support.europarkingservices.com
support.fixsus.be
support.forexyestrading.com
support.gelship.com
support.genialcompliance.com
support.globalpos.fr
support.la-gec.com
support.lux.bertha.app
support.medlive.pt
support.mydre.org
support.nl.bertha.app
support.onlinevakman.com
support.orandke.com
support.ormicloud.com
support.profitfarm.it
support.raigmoreconnect.co.uk
support.regenwasser.com
support.safetech.co.uk
support.seetickets.ch
support.sellable.app
support.sim-spiecn.fr
support.smartsiam.com
support.smcit.co.za
support.technis.com
support.tradedu.com
support.vitisevents.com
support.webandappstudio.com
support.yasido.com
support.ymer.it
support.yunatech.co.uk
support.zalman-it.de
supporto.tennisvalla.it
supportportal.dekkersit.com
testing.advance-he.ac.uk
ticket.swiss-prime.ch

Other certificates including the domain name zalman-it.de

(limited to 100 certificates)
support.zalman-it.de
web.zalman-it.de
service.acctopus.com
vr.zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
helpdesk.fsis.dk
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.kolekto.io
support.zalman-it.de
web.zalman-it.de
it.zalman-it.de
support.zalman-it.de
service.farmlyplace.com
service.acctopus.com
web.zalman-it.de
zalman-it.de
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.eurocommand.com
cmnsoon.zalman-it.de
help.paymentsolutionandservice.com
ticket.swiss-prime.ch
support.yasido.com
zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.itqmetis.com
support.zalman-it.de
web.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.zalman-it.de
support.medlive.pt
support.zalman-it.de
cmnsoon.zalman-it.de
service.acctopus.com
support.zalman-it.de
support.forexyestrading.com
vr.zalman-it.de
vr.zalman-it.de
support.zalman-it.de
help.paymentsolutionandservice.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
zalman-it.de
support.zalman-it.de
support.zalman-it.de
cmnsoon.zalman-it.de
support.vitisevents.com
help.paymentsolutionandservice.com
support.genialcompliance.com
support.zalman-it.de
support.zalman-it.de
it.zalman-it.de
vr.zalman-it.de
support.yasido.com
support.zalman-it.de
zalman-it.de
support.zalman-it.de
it.zalman-it.de
support.zalman-it.de
zalman-it.de
cmnsoon.zalman-it.de
support.zalman-it.de
service.acctopus.com
zalman-it.de
vr.zalman-it.de

Certificate

The complete raw certificate details for support.zalman-it.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pP95qgDRe+rMlVENde8
qHPKbA4A7CDhS8XPN7uCskec7lz7RiRU7RUzljcVlagoLF64kp/QY26cMsWHePYH
/XxQVnxNIP8N9xTzKWmtzBi8t2UIYnDGDfJHBAU7uFwoGFRlD2CaqZWOXZgX3Ik7
SlhB9dXLqOkI/FDP75Vdfs3OMb6Wg+elU5rhtZ5YKb+0GHrJH6pszrEf+GhJyuzp
maI0bA1wukCcppUgplfQoDzAujIuXa+/QynfWmchC4BNht14fpNDQJzQl0OdriOy
o7GhdhH8k6nsPUUnpxzfl9s03RTzPOfRhyNYRt3bje5jWmk3KreLIGeFs3weD1kC
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336532541096561515075154504879444806702483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 02:07:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 02:07:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.zalman-it.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29612740838933019943287844377935001016572083189960923289881552157673317097311107729663106222279848025136841889878666349307995115465858477126661737935797470187322307418259515546888514835550235662039890513136418429028676219801060240762907731342589661528228545129168910345366240182313234258971250728773004146389170065061877109373456893041334876547982454352438709743499499871729127657574197334868174131579576657967106179243980874419096165306196948670748891509288150776348386510180511999537148361256784109503221236799928859345757369157184826431838086942104057889258335205443056870267500984987001996395243311649078835217059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2c08495fbbfdcb22f8fee03f5346544313c5b64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.amicachips.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.luca24.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.ordini24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistenza.prodottitipici.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.cbmc.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandedf.suder.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.entrance-robotics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.cintra.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clousale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.displax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.globalpaymentcard.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.moviik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paymentsolutionandservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.prestigetelecomgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sprinthero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.tinybots.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.winmaxnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcentrum.medixs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.creative-network.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.dataroad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.fsis.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.gerber-netcom.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.inspiration-healthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.leventhorpe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.polyright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.privateproperty.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.prodress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.rezcontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.teqz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvsupport.naturalpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.servicedesk.khaoscontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment.workclubhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivsupport.fleetoperations.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccprojects.servicedesk.khaoscontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noonacademy.becrypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podpora.construction.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produccion.beldallorens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.farmlyplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.fmh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinaxiahelp.younicorns.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.foqumread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.promede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strega.support.ignitehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.accessy.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.adshares.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.airdial.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.at.bertha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bi4controlling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bool.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cfxquantum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cobaltbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.easy2play.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.enaweg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.eurocommand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.europarkingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fixsus.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.forexyestrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gelship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.genialcompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.globalpos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.la-gec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lux.bertha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.medlive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mydre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nl.bertha.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.onlinevakman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.orandke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ormicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.profitfarm.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.raigmoreconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.regenwasser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.safetech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.seetickets.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sellable.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sim-spiecn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.smartsiam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.smcit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.technis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tradedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.vitisevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.webandappstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yasido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ymer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yunatech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zalman-it.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporto.tennisvalla.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportportal.dekkersit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.advance-he.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.swiss-prime.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001849d4e54430000040300473045022074d9334ef9c81707edcf9c33441ad35340ef22808d8a84ef8b3d077de1bc83b30221009ad6f7298ea44005c5beae2e656be89f29d63ca2bf14829509fd8b34e01b15ad007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001849d4e5668000004030047304502200b0854df5669309bc1ae7b80d3e329ce18b22a2603ca8e4587387db54e158b9b0221009b3f1f4505238f4e5e8e5c47a9c0e9e86990bbd04e8aa83dae0ef111fe01d206
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005b78e17e3ff0e44f24448ec6d41dd78d2d17825278733803b3ac14fb0efd26014c047489a5d45946c154bd3e6f386a26fafee223fb57f17d3c646d94e829941c40b99232983f3d96e4dd456827f349201ea6fefeace5120cdd75eb9d53d873b2ef39514703cae3c16915d00fd84bd8d3a7977f78dcde08c103be131cae6473f1e80633deb612bdb175725586b3bb8fd30c59d4d453f3afcdd3787f5be3cf97a488ff7e3b9132772d84bb524c4a170a61405ce0f998faa1edf590e46bfe5079f59ef5810cd93de5bb130e9343e001f4899ea9ec0a31213eeaff7d89467e0da5d1cb1565db18269d32d0fceeccde1c7849e593fc94ecb42af56fff4b5c770f6183