heraeus.tcainc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:67:6e:d6:e7:cd:59:d0:96:19:97:fb:c9:45:bf:42:f6:8f was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=heraeus.tcainc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:6e:d6:e7:cd:59:d0:96:19:97:fb:c9:45:bf:42:f6:8f
Serial Number (int): 383645558452467903612586836171434267702927
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 08:2e:52:a5:fa:f0:49:86:4c:7c:95:ab:29:e1:91:1f:5f:3e:fb:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:f3:0d:f3:73:c4:22:77:0e:46:de:3a:74:70:c1:48:81:f3:60:49
Fingerprint (sha256): ed:77:67:c7:a6:d7:91:f9:e7:d0:77:32:a6:5a:65:9f:7e:16:d5:97:c8:22:eb:26:82:72:84:65:8b:50:a6:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate heraeus.tcainc.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heraeus.tcainc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atendimento.pizzattolog.com.br
blog.simplicom.ca
bss.travelpoint.om
carzone.testingport.co.in
contact.theworlddancemedia.officialvincify.com
customersupport.solargentechnologies.com
desk.ensembletravel.com
destek.armabilisim.com
financeiro.mahospitalar.com.br
fracionado.pizzattolog.com.br
help.advertiseonline.co.nz
help.alamudy.com
help.chromatters.com
help.fidigital.com.au
help.goa-tech.com
help.pwscomputers.com.au
help.resistanceibiza.com
help.techieshunt.com
help.texub.com
help.ultra-abudhabi.com
help.umapped.com
help.vast.rehab
help.vestalny.com
helpdesk.miconsult.co.za
helpdesk.praxia.co.za
helpdesk.srmtech.com
helpdesk.studio5.dev
helpdesk.systemone.mx
heraeus.tcainc.com
hrcare.sesb.com.my
iasc.we-worldwide.com
info.ckb.com.au
itsupport.southernscore.com.my
mutoshi.citek.vn
payee.disbursecloud.com
pentair.tcainc.com
portal.radarcst.com.br
portal.warpspeedsupport.com
pronghornhelp.vetport.com
qualidade.pizzattolog.com.br
servicedesk.q4gems.ca
soporte.bnd.uno
soporte.fixitcomputacion.com
soporte.nodosnet.com
suporte.ancoratec.net
suporte.diversitelda.com
support.360techventures.com
support.alphavs.com
support.bactopus.com
support.bxb.technology
support.c53.io
support.cleareye.ai
support.dashop.app
support.doctorprox.com
support.doexam.com
support.dxa.marketing
support.eagltechnology.com
support.geoserve.nz
support.graffeocares.com
support.hyperguest.com
support.inflatable-signs.com
support.innorobix.com
support.ironmanage.com
support.kompassinc.com
support.lakewoodacademy.co.za
support.leapyears.com
support.magnoliarisksolutions.com
support.nationallistservices.com
support.navox.games
support.pcicg.com
support.pctechinfosys.com
support.pecahc.ca
support.pluscomply.com
support.retailavenues.com
support.safehousetech.com
support.sandeshlive.com
support.sandz.com
support.smithcommerce.com
support.summerfield.ph
support.tempsexpert.com
support.tg-hr.com
support.ultra.us
synergyhelps.com
tickets.alphacentri.com
tucotech.slrtransports.in
www.unlg.me
zohoconfig.kdmintellitrak.com
zohotest07.okutama-lab.com
zohotest08.okutama-lab.com
zohotest09.okutama-lab.com

Other certificates including the domain name tcainc.com

(limited to 100 certificates)
assist.sky64.io
tcainc.com
*.tcainc.com
cliq.skylineclean.com
support.safapply.com
support.augos.io
tcainc.com
tsmsupport.lenovocloudsoftware.com
mail.martinflyer.com
drive.kanjim.tech
info.tcainc.com
stockwells.wavetronix.com
form.ketaiconsulting.ru
mail.twincitiesautomation.com
tcainc.com
tcainc.com
go.medlintc.net
mail.twincitiesautomation.com
sharepoint.tcainc.com
tcainc.com
tcainc.com
tcainc.com
cliq.skylineclean.com
mail.martinflyer.com
tcainc.com
sprints.notjustbots.com
tcainc.com
tcainc.com
*.tcainc.com
careers.theskunklabs.com
support.nucular.tech
careers.theskunklabs.com
heraeus.tcainc.com
tcainc.com

Certificate

The complete raw certificate details for heraeus.tcainc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpl+WeQx6qiouNoU5hHS
9qtk15FJB77U3MCU4WXL1PBehS9JDOQB9YNXATjU6p0iDmLh9T0U3ooARNefT8k/
QVez2VIMgZk5tcr5MMmvXG2LPpmAbaJ7bglvaFuHqouCtp/F51OyTWLDHlGlJQPL
jmaXYBiTQh/00BjaauhbVOdvANBwwGo5/HzuEWvHbOHwAFLduvncXFtXAqn3+URb
kQL6H5xBcJEgD+ZlfSOfyqaQF9eUe9NX4HM0iRbRU009d50Z0u2jx8rMHZ9KHei3
A+QWKuuvck5MPIAVVi9yhEhkkAjgHQWEi+rXuj/4xcJ2alZh+FEAgEZhetQy03N1
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383645558452467903612586836171434267702927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 16:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 16:19:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heraeus.tcainc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18506483020076772697903969371155169199181876134930369733603708033798632055974587126185340229233169270315956441388130354135943047021947095321642219140722855687711372708740187879133332537512348202572530329744421589856085437593632317704275539181105328412758756780236028200023625231207083557329265161801475083018518200130598997973907026270433246405809822875690638599243865457755849754543566702851692823234752432114922298844088770541700885844063510203456658535874586477408784126764579990195687796926106593105867850973267297669863384949800130492312213233463658751531372466535288672150102879174258845131138464967446867703121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							082e52a5faf049864c7c95ab29e1911f5f3efb6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atendimento.pizzattolog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.simplicom.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bss.travelpoint.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carzone.testingport.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.theworlddancemedia.officialvincify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.solargentechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desk.ensembletravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destek.armabilisim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financeiro.mahospitalar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fracionado.pizzattolog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.advertiseonline.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.alamudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.chromatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.fidigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.goa-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.pwscomputers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.resistanceibiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.techieshunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.texub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ultra-abudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.umapped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.vast.rehab'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.vestalny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.miconsult.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.praxia.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.srmtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.studio5.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.systemone.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heraeus.tcainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrcare.sesb.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iasc.we-worldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.ckb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport.southernscore.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutoshi.citek.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payee.disbursecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pentair.tcainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.radarcst.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.warpspeedsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronghornhelp.vetport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualidade.pizzattolog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.q4gems.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.bnd.uno'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.fixitcomputacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.nodosnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.ancoratec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suporte.diversitelda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.360techventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.alphavs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bactopus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bxb.technology'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.c53.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cleareye.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dashop.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doctorprox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.doexam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dxa.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.eagltechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.geoserve.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.graffeocares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hyperguest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.inflatable-signs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.innorobix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ironmanage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.kompassinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lakewoodacademy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.leapyears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.magnoliarisksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.nationallistservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.navox.games'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pcicg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pctechinfosys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pecahc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.pluscomply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.retailavenues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.safehousetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sandeshlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sandz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.smithcommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.summerfield.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tempsexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tg-hr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ultra.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synergyhelps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.alphacentri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucotech.slrtransports.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unlg.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zohoconfig.kdmintellitrak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zohotest07.okutama-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zohotest08.okutama-lab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zohotest09.okutama-lab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c59e3bf260000040300483046022100a7f616ff15951ac3ba6e3ebf0ca84d97b4cfa98007f3e1389056c62c963efbf00221009d2291c93e5204229a7feb401c0c4eb81c954017ae3a715963910ad198dd156d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c59e3c0800000040300483046022100e11187106dd8daa6132b1873d9864e6aec883d4cc98f286500386303cfd456f0022100f46733cc93599aa96062b69a0817103eb26be711057a8dd5161534cd3523604c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040dfab852df13f46198716161f6ff3a01fa20c64ab3a55c0b042f3b06f6a76779bba472d9f95421f57267937b627d4e87d68a1915839a54080b4e606d41a0636a4b724d253f3443868250536e67632b12c455ad1f8fccaf338ee0faaed1fd80d1595d26b037ecbf6313b9bc69a785ecdd75669878e1f5e5abcf85723bb5c3440025046849940dd1fb92b39ec0d8a126a20e8c12f9629ad8a8edb1e5bce4eb2c924d0a240cc8b98d6c74e301876bc54d256a6fbba2bcb2d6deaf32d953720a6e3be8da7c5f70d7ddea303d95153a67f7038751ab670aad87f879818df4c9bd86722650f052d31d2026d0d2337c5fc5d3a2881fdd42ff70f0c3534304117ba2bb7