mthosting.orange.mu

- Blanche Birger Company Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:71:20:d9:0b:1d:53:76:66:c0:86:3a:5f:c9:1e:31 was issued on by DigiCert Inc.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Blanche Birger Company Limited

Organization: Blanche Birger Company Limited
State / Province: Port Louis
Locality: Port Louis
Country: MU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:71:20:d9:0b:1d:53:76:66:c0:86:3a:5f:c9:1e:31
Serial Number (int): 17867359723276712415929826232913960497
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:a4:3e:de:91:1a:ec:79:b5:0a:8e:aa:1e:d5:b1:42:37:1b:c1:fe
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6d:5d:05:88:c5:1f:fa:0d:31:df:13:e6:e9:a7:3e:23:64:94:68:6e
Fingerprint (sha256): ee:a0:06:c3:2c:ed:fd:44:15:b7:68:1c:f8:f3:ef:42:5b:b4:02:26:73:07:38:c8:39:d0:64:f8:29:a1:31:8b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl

Check the revocation status for certificate mthosting.orange.mu

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mthosting.orange.mu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mthosting.orange.mu
autodiscover.mthosting.orange.mu
autodiscover.avismauritius.com
mail.avismauritius.com
msl.orange.mu
mail.msl.orange.mu
autodiscover.msl.orange.mu
mail.cbe.mu
autodiscover.cbe.mu
mail.cbc.com.mu
autodiscover.cbc.com.mu
mail.elegance.mu
autodiscover.elegance.mu
mail.capitalasset.mu
autodiscover.capitalasset.mu
bc.intnet.mu
autodiscover.bc.intnet.mu
mail.asl-mauritius.com
autodiscover.oriona.orange.mu
autodiscover.asl-mauritius.com
mail.stateinvestment.mu
autodiscover.stateinvestment.mu
meredis.intnet.mu
autodiscover.meredis.intnet.mu
mail.asl-asia.com
autodiscover.asl-asia.com
mail.manjoo.intnet.mu
autodiscover.manjoo.intnet.mu
mail.mscl.mu
autodiscover.mscl.mu
mail.mgc.mu
autodiscover.mgc.mu
mail.asl-madagascar.com
autodiscover.asl-madagascar.com
mail.primepartners.mu
autodiscover.primepartners.mu
mail.primesecuritiesltd.com
autodiscover.primesecuritiesltd.com
mail.portlouisfund.com
autodiscover.portlouisfund.com
mail.verandaleisurehospitality.com
autodiscover.verandaleisurehospitality.com
mail.ascotlife.com
autodiscover.ascotlife.com
webmail.mauritours.net
autodiscover.mauritours.net
webmail.otentik.mu
autodiscover.otentik.mu
webmail.secrets-collection.com
autodiscover.secrets-collection.com
webmail.travel.mauritours.net
autodiscover.travel.mauritours.net
webmail.pointevenus.intnet.mu
autodiscover.pointevenus.intnet.mu
mail.cryptosign.mu
autodiscover.cryptosign.mu
mail.mobilenet.mu
autodiscover.mobilenet.mu
mail.krossborder.mu
autodiscover.krossborder.mu
mail.gra.intnet.mu
autodiscover.gra.intnet.mu
mail.hervehenry.intnet.mu
autodiscover.hervehenry.intnet.mu
mail.pkf.mu
autodiscover.pkf.mu
mail.mauritiussugar.mu
autodiscover.mauritiussugar.mu
webmail.calaw.mu
autodiscover.calaw.mu
mail.ma.intnet.mu
autodiscover.ma.intnet.mu
mail.avcltd.mu
autodiscover.avcltd.mu
mail.safariadventures-mauritius.com
autodiscover.safariadventures-mauritius.com
mail.texparts.intnet.mu
autodiscover.texparts.intnet.mu
mail.a1a.co.mu
autodiscover.a1a.co.mu
mail.fallequinox.net
mail.metexltd.com
mail.24heuresinfo.com
mail.easy-forwarder.com
mail.pearl.mu
mail.fareast.mu
mail.oriona.orange.mu
mail.ateliersoleil.mu
autodiscover.ateliersoleil.mu
mail.cslvirtualsecretary.com
autodiscover.cslvirtualsecretary.com
autodiscover.pearl.mu
autodiscover.fareast.mu
autodiscover.easy-forwarder.com
autodiscover.24heuresinfo.com
autodiscover.metexltd.com
autodiscover.fallequinox.net
mail.krossborder.intnet.mu
autodiscover.krossborder.intnet.mu
mail.noveprimgroup.com
autodiscover.noveprimgroup.com

Other certificates including the domain name orange.mu

(limited to 100 certificates)

Certificate

The complete raw certificate details for mthosting.orange.mu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhaJ+67vCD9YZFqAY+Ex
SwW1EjAdnJ9ikY6x82zZwAP/yVNiv/PEy8vGX9xzETp3cUcm988KtaDiI5YS0TlI
YJjXEsG7ZaUidL24dUN5WsbRuZEGxxh0f6pG7dAxJDyzKwla0BpfTA2IapE+aLwj
YOro1Egu2Hn5Fz8nUNfFr8faRokTsbSF8mYzz7GNzxA9X4bl9GOivW7ZRUR605OK
wBXE0neBaqOgXv4YXz+qDk0JDe9H+idi3w935nP9i3duWn/w4wBGPy56v8NLsK8i
SyyxFyeF77TONAPzyGJGMWG5LEl8npDxNVEviroClyz17JJ+kVd/Uzvqaqtr1GUM
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17867359723276712415929826232913960497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Port Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Port Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Blanche Birger Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mthosting.orange.mu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18946860138387602451491300706843959240617604430904137669177014884649439090735061369768558216081473429300074490861781650296772013335675376474265930059292179476658696374047394536134386813782446343272292750580208175227510384660481805003386001014813997767019779111118082105663383907914881623036633131859510123368243478988801404984003696874758901334006392107584167984764735112493543734722089477991172935528878622917888950648818325936523649834456434221504968161464018306746759227791519538038201118546048139709735924946451683045322276909964535133085732270824995512573863003114436801614427582603628810154921612998165378960629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7da43ede911aec79b50a8eaa1ed5b142371bc1fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mthosting.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mthosting.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.avismauritius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.avismauritius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msl.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.msl.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.msl.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cbe.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cbe.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cbc.com.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cbc.com.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.elegance.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.elegance.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.capitalasset.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.capitalasset.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bc.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bc.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asl-mauritius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oriona.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.asl-mauritius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stateinvestment.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.stateinvestment.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meredis.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.meredis.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asl-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.asl-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.manjoo.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.manjoo.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mscl.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mscl.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mgc.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mgc.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.asl-madagascar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.asl-madagascar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.primepartners.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.primepartners.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.primesecuritiesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.primesecuritiesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.portlouisfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.portlouisfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.verandaleisurehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.verandaleisurehospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ascotlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ascotlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.mauritours.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mauritours.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.otentik.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.otentik.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.secrets-collection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.secrets-collection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.travel.mauritours.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.travel.mauritours.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pointevenus.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pointevenus.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cryptosign.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cryptosign.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mobilenet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mobilenet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.krossborder.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.krossborder.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gra.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gra.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hervehenry.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hervehenry.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pkf.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pkf.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mauritiussugar.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.mauritiussugar.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.calaw.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.calaw.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ma.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ma.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.avcltd.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.avcltd.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.safariadventures-mauritius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.safariadventures-mauritius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.texparts.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.texparts.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.a1a.co.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.a1a.co.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fallequinox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.metexltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.24heuresinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.easy-forwarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pearl.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fareast.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oriona.orange.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ateliersoleil.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ateliersoleil.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cslvirtualsecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cslvirtualsecretary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pearl.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fareast.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.easy-forwarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.24heuresinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.metexltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fallequinox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.krossborder.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.krossborder.intnet.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.noveprimgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.noveprimgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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