acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:34:10:b3:f0:8f:28:13:e4:17:f4:b1:16:d3:dd:fd was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:34:10:b3:f0:8f:28:13:e4:17:f4:b1:16:d3:dd:fd
Serial Number (int): 14891846165122102129579710931352673789
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 80:86:51:29:25:26:fc:a0:e8:ab:8b:5d:05:0b:51:32:b8:72:68:c7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): ea:5a:3f:59:d9:22:b1:ef:27:46:41:9a:41:62:5e:76:44:bb:67:af
Fingerprint (sha256): 00:66:6f:ca:44:57:8f:c9:33:0a:30:49:57:28:45:52:7b:34:b4:26:ec:b5:87:72:62:79:c8:59:a4:2f:38:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate acquia-sites.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
www.emmis.acsitefactory.com
www.heartland.acsitefactory.com
www.sabmiller.acsitefactory.com
www.umn.acsitefactory.com
www.peacecorps.acsitefactory.com
www.hms.acsitefactory.com
www.appnovation.acsitefactory.com
www.veolia.acsitefactory.com
www.veolia.cn
www.veolia.co.uk
www.veolia.com
www.veolia.cz
www.veolia.de
www.veolia.fr
www.veolianorthamerica.com
livingcircular.veolia.com
www.cityofla.acsitefactory.com
www.veolia.com.mx
www.veolia.pl
www.c.acsitefactory.com
www.ideaden.acsitefactory.com
www.nasdaqpoc.acsitefactory.com
www.box.acsitefactory.com
www.presales.acsitefactory.com
veolia.fr
veolia.cn
veolia.cz
veolia.de
veolia.com.mx
veolia.com.pe
veolia.in
veolia.com.co
veolia.ie
veolia.sk
veolia.co
veolia.cl
www.entercom.acsitefactory.com
www.demo.acquia-cc.com
www.cfn.acsitefactory.com
www.unileverpov.acsitefactory.com
www.nas.acsitefactory.com
www.accuchek.acsitefactory.com
www.tulane.acsitefactory.com
www.dev-wmgpaas.acsitefactory.com
www.test-wmgpaas.acsitefactory.com
www.wmgpaas.acsitefactory.com
www.dev-starwoodwwpov.acsitefactory.com
www.test-starwoodwwpov.acsitefactory.com
www.starwoodwwpov.acsitefactory.com
www.dev-asf.acsitefactory.com
www.test-asf.acsitefactory.com
www.asf.acsitefactory.com
www.omes.acsitefactory.com
www.dev-omes.acsitefactory.com
www.test-omes.acsitefactory.com
www.masterchannel.acsitefactory.com
www.dev-masterchannel.acsitefactory.com
www.test-masterchannel.acsitefactory.com
www.novartis.acsitefactory.com
www.test-novartis.acsitefactory.com
www.dev-novartis.acsitefactory.com
www.dev-accuchek.acsitefactory.com
www.test-accuchek.acsitefactory.com
www.dev-riceedu.acsitefactory.com
www.test-riceedu.acsitefactory.com
www.riceedu.acsitefactory.com
www.dev-entercom.acsitefactory.com
www.test-entercom.acsitefactory.com
www.test-sabmiller.acsitefactory.com
www.dev-sabmiller.acsitefactory.com
www.dev-oxford.acsitefactory.com
www.test-oxford.acsitefactory.com
www.oxford.acsitefactory.com
www.test-nas.acsitefactory.com
www.dev-nas.acsitefactory.com
www.test-cfn.acsitefactory.com
www.dev-cfn.acsitefactory.com
www.syngenta.acsitefactory.com
www.test-syngenta.acsitefactory.com
www.dev-syngenta.acsitefactory.com
www.dev-lvpov.acsitefactory.com
www.test-lvpov.acsitefactory.com
www.lvpov.acsitefactory.com
www.demo.acsitefactory.com
www.test-demo.acsitefactory.com
www.dev-demo.acsitefactory.com
www.test2-cfn.acsitefactory.com

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSVpHBfGR/ENHwYVSONC
ummHP5V3e+lJ9lz3vPWTbQ2UeF07zxJaQYqkhB4swcOVbgTOEJAf4uuvop6dRziw
4h8KyJnmFmqTUePz1swNsOlrL4mgXUxWtW/MQ0zjZ0RQAbRYmI/NV48jcYuawblP
oOacKBba/UAb59LKZ938eotzszTyUaP6uCEdhIm1H1NTk/od1IqSEvG7x7i4+Baq
vKo1tgyWJK+4JWJWrX6de4uveI2FY0k/jF9pX6l5mQxKHhYN7t1EtB3s54SWd16z
+ZAWde4sbN8VzmDrSQCN5USFQjo8ZOxfs6FyGnhb0Z+V2h42DMwZb1W48QP+5ifC
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14891846165122102129579710931352673789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22362627825973731381920051531266813869153557586887125328937144497760851467335172951856181536492429949880703814574013803629270055799793780578242095110639034090733710429632631510962087126613026445575967665362341959500034909064380364713034541043630146643651978268480269875512564175884344098168958351758055520062371555483512766361325176324188999435266398643679354870843582292366454599146106619551771030692805001717833012983870868036065906158249830890459846737176927007941175612134477478650839405884930863406437849617451609073001763212156206253064974684093720309563467619987107959702367616369197615178901823867066635502281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							808651292526fca0e8ab8b5d050b5132b87268c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emmis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartland.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sabmiller.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peacecorps.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hms.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appnovation.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolianorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingcircular.veolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofla.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideaden.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasdaqpoc.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.box.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presales.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entercom.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.acquia-cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unileverpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accuchek.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulane.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-wmgpaas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-wmgpaas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmgpaas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-starwoodwwpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-starwoodwwpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starwoodwwpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-asf.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-asf.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asf.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omes.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-omes.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-omes.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterchannel.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-masterchannel.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-masterchannel.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-novartis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-novartis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-accuchek.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-accuchek.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-riceedu.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-riceedu.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riceedu.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-entercom.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-entercom.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-sabmiller.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-sabmiller.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-oxford.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-oxford.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxford.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-nas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-nas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syngenta.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-syngenta.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-syngenta.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-lvpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-lvpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-demo.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-demo.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test2-cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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