desk.rickandnix.com

Issued by R3

About this certificate

This digital certificate with serial number 04:84:5a:8c:7d:a3:4d:9d:61:c5:89:98:98:92:61:09:b2:c0 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=desk.rickandnix.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:5a:8c:7d:a3:4d:9d:61:c5:89:98:98:92:61:09:b2:c0
Serial Number (int): 393486776150025112623197668447472170152640
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:27:ce:a6:19:30:18:20:b5:ac:b3:e2:ab:1e:c7:0d:e6:2c:21:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:d1:0d:47:e9:d2:41:d8:bc:b1:93:80:92:58:37:dc:d2:8c:06:40
Fingerprint (sha256): d5:c9:f5:4f:ec:fe:a0:53:ee:4b:26:22:a3:cd:e8:cd:b4:ea:15:31:49:8f:59:d9:a4:e2:b7:93:9a:17:6d:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate desk.rickandnix.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desk.rickandnix.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actsupport.aspen-tech.com
anlapphat.citek.vn
bio.citek.vn
cadivi.citek.vn
dataprotection.desk.cubepayment.com
desk.nova-analyticlabs.com
desk.rickandnix.com
desk.sunovio.com
employeecare.cpousa.com
fecon.citek.vn
giahoa.citek.vn
help.aquipa.com
help.clixby.app
help.coscoroba.co.za
help.gprsinc.com
help.it-portal.com
help.newish.tech
help.northbrook.nz
help.scopicsoftware.com
help.zuloomi.com
helpdesk.axessusa.com
helpdesk.blueeyedefense.com
helpdesk.enconnex.com
helpdesk.ennoventure.com
helpdesk.globalxperts.net
hr.oodc.com.ph
it.comevo.com
jawabshafi.com
kb.ethostec.net
mainetti.citek.vn
maison.citek.vn
mycenterlinebs.com
nonpm.scopicsoftware.com
partner.basecampconnect.com
partner.blueeyedefense.com
peakmediasupport.midtc.com
prismsupport.rhipe.com
qwerty.aaathavan.com
servicedesk.onex.co
shiseido.citek.vn
soporte.cloudbaselatam.com
soporte.smarty.com.ar
soporte.zoluciones.pe
suporte.exitusmarketingdigital.com.br
support.conversion-hub.com
support.cptteller.co.za
support.creatorscripts.com
support.crowdlog.jp
support.deepstudios.ir
support.deihssolutions.com
support.dulichtudo.vn
support.earthscapes.in
support.encotes.com
support.gatewayshospital.org
support.goliveus.com
support.graphicrhythm.com
support.in.betway.com
support.innovorg.com
support.itcorner.rs
support.lingo4all.com
support.midtc.com
support.mobileagile.com.mx
support.mykring.com
support.nightowl.care
support.paisawapas.com
support.pimtoday.com
support.probewell.com
support.scienceoncall.com
support.sciencerestaurants.com
support.teligentip.com
support.triadtechnologies.com
support.tripmaza.com
support.wuchon.com
support.yeshivaschools.com
vas.citek.vn
www.support.mdmpublishing.com
www.testhelp.onlycitrus.com
zohosupport.intercomp.com.mt

Other certificates including the domain name rickandnix.com

(limited to 100 certificates)
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.onmon.global
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
helpdesk.miadistribution.com.au
support.thetelephony.co
support.gamingedge.net
support.signalmash.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
desk.zurot.org
help.gogappi.com
help.gogappi.com
support.lingo4all.com
desk.zurot.org
support.onmon.global
nexsource-sbo.nexus-sr.com
support.whiteoakpartners.com
support.gamingedge.net
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.tappyrewards.com
support.lingo4all.com
desk.rickandnix.com
support.thetelephony.co
helpdesk.miadistribution.com.au
www.unvs.club
support.thetelephony.co
support.onmon.global
nexsource-sbo.nexus-sr.com
desk.rickandnix.com
support.lingo4all.com
support.lingo4all.com
desk.rickandnix.com
desk.zurot.org
support.ameritrex.net
support.signalmash.com
support.gamingedge.net
support.niveshonline.com
support.lingo4all.com
zoho.silvprop.com
support.lingo4all.com
support.whiteoakpartners.com
help.gogappi.com
helpdesk.miadistribution.com.au
www.unvs.club
support.lingo4all.com
support.lingo4all.com
support.lingo4all.com
desk.zurot.org
support.lingo4all.com
support.lingo4all.com
support.whiteoakpartners.com
support.lingo4all.com
support.lingo4all.com
support.niveshonline.com
www.unvs.club
support.lingo4all.com
support.ameritrex.net
support.niveshonline.com
support.lingo4all.com
zoho.silvprop.com
support.gresnickrealty.com
support.lingo4all.com
nexsource-sbo.nexus-sr.com
support.lingo4all.com
support.lingo4all.com
zoho.silvprop.com
support.lingo4all.com
support.niveshonline.com
support.gamingedge.net
zoho.silvprop.com
support.lingo4all.com
helpdesk.miadistribution.com.au
help.gogappi.com
support.lingo4all.com
support.lingo4all.com
support.onmon.global
desk.rickandnix.com
support.lingo4all.com
support.lingo4all.com
support.whiteoakpartners.com
support.lingo4all.com
support.thetelephony.co
support.lingo4all.com
support.lingo4all.com
www.unvs.club
support.lingo4all.com

Certificate

The complete raw certificate details for desk.rickandnix.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFiK0qKe5OinkuuOKIO
hKuxtqSo4pf9w5EQCPzIWgqhphXbBRPNQIg4twuKkmAJQr+wZO4G/ckYSRE5ldGl
oLJj4gUvlf/IBRyvVqNxeR+tPxRZInlIdwAwbCxOKTwMM7pzh8PSYVGCJZWN2e5J
yXoB2geKgimnLOk91PwpO6IdIk5pwIlBzxuxYwidV1z8iwQ5ArkNeeXhN3tH0A6O
v9DgGw3eczdWELYKC5Jw3b9tDO+paTXjnppsxaByb1tsyzGdXUTeq+86LGQm6G2Y
qIlO7qfoQBDnUg4DASCpIo8WEYvsWMc4FeiZO1Xt8x239+n8HjJQcWVzalSKq5nV
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393486776150025112623197668447472170152640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-05 11:16:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 11:16:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desk.rickandnix.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20443397726438925475369505365970213621253675903970828458049818090807771453702309806288735409966822350132231634738597821492868952162073918361122300704681068245207585516732867780719677298141940500284259940047899523582418243879516000409498714113101026685929696170953615323272485772464931093201719692319191134725004458689042834561268555662677159925491873394657002363597388066756955004486030413611029309188293980761115191116702092889227580641380206041295877284395273810267137244024870625171324804109530988069377037709932460770798336230311919502027780933004516819870161812298655325858891104332143445533662176016821481231699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0027cea619301820b5acb3e2ab1ec70de62c21ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actsupport.aspen-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anlapphat.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadivi.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataprotection.desk.cubepayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.nova-analyticlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.rickandnix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.sunovio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeecare.cpousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fecon.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giahoa.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.aquipa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clixby.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.coscoroba.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.gprsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.it-portal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.newish.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.northbrook.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.scopicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.zuloomi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.axessusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.blueeyedefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.enconnex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.ennoventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.globalxperts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.oodc.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.comevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jawabshafi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb.ethostec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainetti.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenterlinebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonpm.scopicsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.basecampconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.blueeyedefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakmediasupport.midtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prismsupport.rhipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qwerty.aaathavan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.onex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiseido.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.cloudbaselatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.smarty.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.zoluciones.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.exitusmarketingdigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.conversion-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cptteller.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.creatorscripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.crowdlog.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.deepstudios.ir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.deihssolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dulichtudo.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.earthscapes.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.encotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gatewayshospital.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.goliveus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.graphicrhythm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.in.betway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.innovorg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.itcorner.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lingo4all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.midtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mobileagile.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mykring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nightowl.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paisawapas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pimtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.probewell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.scienceoncall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sciencerestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.teligentip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.triadtechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tripmaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.wuchon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.yeshivaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vas.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.support.mdmpublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testhelp.onlycitrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zohosupport.intercomp.com.mt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017c506275a90000040300473045022100e38d78c5a2f3640ec29ac39c1e0f121109c06df0ac2dcbefe9577713e4bd1a6802205f3ec3e91d422b3282899f16314cf28ac26ebcf672088168e1730689fb109b3e00770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c506277ce0000040300483046022100e714585922eca7c201177a58972077b9d9d8aeeebec88661533e9b9b993ee4ef022100f406cf7e77b8131b1bd80b0be9cadf7c12c142c4cda66f76d5fe13940844ff70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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