support.aikensoftware.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3e:4b:e7:19:84:91:32:7c:d1:e0:41:e7:99:63:b6:32:12 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.aikensoftware.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3e:4b:e7:19:84:91:32:7c:d1:e0:41:e7:99:63:b6:32:12
Serial Number (int): 369647542513960655462209501511351539216914
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 68:64:a5:99:a2:06:ab:52:5b:20:6d:08:25:63:f0:90:42:f9:d7:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:a7:03:0b:8c:1f:bc:ea:9d:26:e7:55:1d:bf:ac:0f:78:6b:62:fa
Fingerprint (sha256): ce:bc:fb:6b:50:ed:7d:cd:90:e1:32:63:59:4e:14:24:78:6d:0e:dd:b6:df:f5:19:83:4c:85:d8:0d:20:30:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support.aikensoftware.co.uk

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.aikensoftware.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bluservice.blurent.com
compta.e-attestations.com
connectivity.profitroom.com
contact.recbody.com
desk.impression.nl
desk.lumit.it
desk.medify.com
development.grccontrol.com
development.khaoscontrol.com
dpo-desk.dlm-group.co.uk
dpo-desk.dpo-assist.com
geospatialsupport.naturalpower.com
help.callnowbutton.com
help.e-attestations.com
help.eventora.com
help.qweb.si
help.sightmill.com
helpdesk.ais-uk.net
helpdesk.atmostechnology.co.uk
helpdesk.hoggle.nl
helpdesk.tolarus.support
kedgeifc.88campus.com
onedesk.adm-concept.com
privacy.e-attestations.com
projects.e-attestations.com
service.movinganow.de
service.samcon.be
service.wineowners.com
servicedesk.quanta.com
servicedesk.roi360.co.uk
services.rightmarket.com
soporte.imf.com
soporte.penwin.org
support.28hands.com
support.actibase.fr
support.aikensoftware.co.uk
support.amplyfi.com
support.andica.com
support.bestexhub.com
support.bpc.gr
support.cogitop.fr
support.construction-drive.com
support.custom-gateway.co.uk
support.cyberdefence.solutions
support.devaura.fr
support.digi.it
support.e-attestations.com
support.easyris.fr
support.elyone.com
support.emls.fr
support.fermax.com
support.hgem.com
support.infield-safety.com
support.isatis-cybersecurity.nl
support.itztm.nl
support.jobdigger.nl
support.logicallysecure.com
support.missingtech.com
support.naturalpower.com
support.navit.ch
support.ncdigital.co.uk
support.neolye.com
support.netwalker.eu
support.nlpensioen.nl
support.outsourceit.es
support.podmanagement.co.uk
support.rapid.co.uk
support.rapidwireless.co.uk
support.scalehub.com
support.slidestovideo.com
support.sudolio.com
support.syncmind.my
support.thesmartbear.co.uk
support.tiger-optics.com
support.token2.com
support.verdom.hu
support.virtuo.mc
support.wazzupsoftware.com
support.whitespacetechnology.net
support.wp-eventmanager.com
support.zkracht.nl
support2.totalcontrolpro.com
tuki.vbps.fi
wave.adm-concept.com
www.fit20zohosupport.com

Other certificates including the domain name aikensoftware.co.uk

(limited to 100 certificates)
subscriptions.cs.zohohost.eu
ezglobe.support.virtuo.mc
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
aikensoftware.co.uk
subscriptions.cs.zohohost.eu
help.qweb.si
subscriptions.cs.zohohost.eu
support.medixus.co
help.qweb.si
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
desk.10atm.com
help.qweb.si
subscriptions.cs.zohohost.eu
helpdesk.amlltd.co.uk
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
help.qweb.si
support.ibuy2give.co.uk
help.qweb.si
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
help.qweb.si
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
help.qweb.si
subscriptions.cs.zohohost.eu
help.qweb.si
desk.wgc.ltd.uk
subscriptions.cs.zohohost.eu
support.netwalker.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
support.yourdigitallab.co.uk
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
support.conge.it
subscriptions.cs.zohohost.eu
help.qweb.si
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
support.aikensoftware.co.uk
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
help.waterloo.io
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
help.qweb.si
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu
subscriptions.cs.zohohost.eu

Certificate

The complete raw certificate details for support.aikensoftware.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRxgZwhlfLWBwBhwbpR
E3c0zmF8EJkEQUX2QuHpVJmr0ukjEd5bCGQ2Ajb+JupCsjdUJTZIPSsdzQl2GrOw
oibk2YxKkRXvUcQfrw/p/mJGda9FNM5yVkvzdK2+ng7z9/4/d4aaDyQ/sznkNiAB
4lluCgLcYrSMYBIIDnztBJ3SOo6AmaY60+tqeetri8w7luZMIY5KcJAI33/jaLmi
MMorZgHPW7aII+xBZ7jKSG4h70lYEeJS2VvRXOKqW05FPYLX0xSfGUmjEQKZo4zK
xBgX8fjyymfkCM2Z6NxLy2dzqoV9zepZAXsfU15NONvff3rL7SmGCNrWujNz9sYB
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369647542513960655462209501511351539216914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 23:24:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 23:24:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.aikensoftware.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26520125051217418262987195907342504298323097977016382331181860764010606882290258662637020480449437359741896385196931704084046183974412258340932099942424859111332201257749246031978446533405278248236572749723716407998307022732321917264562938070167644813551519698936345946412193511881687132252889708556018694732470698697748877758341333149433698695424583492139640041908171227582422141625877374001602906921802817166198836542712829919523341085337526108351420289792616903963942568996937156613181359633186860329853353571179084591344276378156660762132950086840032675755184832528329947150693433704540323815751968660701655204211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6864a599a206ab525b206d082563f09042f9d747
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluservice.blurent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compta.e-attestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectivity.profitroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.recbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.impression.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.lumit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.medify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.grccontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.khaoscontrol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpo-desk.dlm-group.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpo-desk.dpo-assist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geospatialsupport.naturalpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.callnowbutton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.e-attestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.eventora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.qweb.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.sightmill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ais-uk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.atmostechnology.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.hoggle.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.tolarus.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kedgeifc.88campus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedesk.adm-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy.e-attestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.e-attestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.movinganow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.samcon.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.wineowners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.quanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.roi360.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.rightmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.imf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.penwin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.28hands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.actibase.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.aikensoftware.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.amplyfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.andica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bestexhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bpc.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cogitop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.construction-drive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.custom-gateway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cyberdefence.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.devaura.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.digi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.e-attestations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.easyris.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.elyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.emls.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.fermax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hgem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.infield-safety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.isatis-cybersecurity.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.itztm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.jobdigger.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.logicallysecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.missingtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.naturalpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.navit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ncdigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.neolye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.netwalker.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nlpensioen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.outsourceit.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.podmanagement.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rapid.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.rapidwireless.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.scalehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.slidestovideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sudolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.syncmind.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.thesmartbear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tiger-optics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.token2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.verdom.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.virtuo.mc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.wazzupsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.whitespacetechnology.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.wp-eventmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zkracht.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support2.totalcontrolpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.vbps.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave.adm-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fit20zohosupport.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168540be215000004030047304502200216988337d5f3d418505e2759f87396593196c012bd5f3d178a48b10ec84a77022100a8e0f37cb6d46d643b76610b6b66dfb1d968b0b04aa0e581fb7e8346650560cd007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168540be1f90000040300473045022100b3ad7531923d829eeb092ab668fac8fb0333837657ede611b1f473b25b2cff5502201a15ce0ed04f3c65b46cb8f592333478818d1e9c68d515bf03c824594726e5c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b8ada4b309aeab72a4c7912842c05f3ba102c4d6b592fb05791cb2d526f5e7760d0eb3ef2dca9944061d428ce1c08272be086b83ebbacc4372c660a442a35309e1cd1e3fb915968779e4ab13c0e4c9fbf23daf895e92707efa517da7e8ed87947cfe27f06183ce95ce402b38965e8a1b8ff3290ed789d95986c85ec736e87f36e25e2cbd09c4c2df257f3fcd78309be3efcbaeb79841f0f205d3b43654e3dc89648615854ac590c6161e186f06dd0503d72f02874275bd1cd1bbbc353cf9e3e8763fc1b19d8473f2741297a27b6043229200d069c74a71247ab3bed58a92e6f968e16d67a98815fcc6ac489e7c0ff32ff5a66f12fa2b0fe14eef8e8b37a4c6c