sansites.jll.com

- Jones Lang LaSalle IP, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:b8:1f:18:a0:8a:a5:0c:48:93:9f:2c:f1:ec:1b:8b was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Jones Lang LaSalle IP, Inc.

Organization: Jones Lang LaSalle IP, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:b8:1f:18:a0:8a:a5:0c:48:93:9f:2c:f1:ec:1b:8b
Serial Number (int): 12919065289893477435493450282687011723
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bc:d0:43:17:b8:f5:85:1b:13:05:a2:ed:2c:b2:fe:13:69:12:fc:16
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b6:54:a6:5c:6d:78:9a:2b:20:b5:e8:42:08:b1:0d:cf:77:a7:6e:2a
Fingerprint (sha256): 01:44:34:2d:fe:f5:65:71:be:ad:02:20:15:a3:54:e1:55:68:42:e2:7e:85:77:bc:08:34:5a:34:db:81:2e:59

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate sansites.jll.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sansites.jll.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sansites.jll.com
111dunsmuir.resource.jll.com
1155robson.resource.jll.com
brg.jllhub-dev.jll.com
brg.jllhub-qa.jll.com
brg.jllhub.com
buzz.jllhub-qa.jll.com
buzz.jllhub.com
coloradononprofit.resource.jll.com
denverimmersiveinnovation.resource.jll.com
dev-site.atginc.com
DTP-CJ.am.jll.com
dtp-h.am.jll.com
DTP-IH.am.jll.com
edmontonproperties.resource.jll.com
jllimmo.be
jllimmo.lu
jlloverview.com
jlloverviewtest.com
lakesidesquare.com
learn.jllhub-dev.jll.com
learn.jllhub-qa.jll.com
learn.jllhub.com
lodsys-jll.com
mentorship.jllhub-dev.jll.com
mentorship.jllhub-qa.jll.com
mentorship.jllhub.com
mplsevents.conference.jll.com
nextgeneration-initiative.co.uk
pfizer2021gwsannualreport.resource.jll.com
pfizer2022gwsannualreport.resource.jll.com
pgs2021annualreport.resource.jll.com
pgs2022annualreport.resource.jll.com
pittsburghpds.resource.jll.com
propertytriathlon.com
stg-site.atginc.com
tenrep.marktopitch1.proposals.jll.com
tenrep.marktoseattle.proposals.jll.com
transformingrealestate.jll.co.uk
www.11901olive.proposals.jll.com
www.1231thirdstreetpromenade.proposals.jll.com
www.155017th.proposals.jll.com
www.433ncamdendr.proposals.jll.com
www.adt.proposals.jll.com
www.allendale.resource.jll.com
www.coloradoconnected.resource.jll.com
www.galleria.proposals.jll.com
www.gloveboxkw.resource.jll.com
www.grandriver.resource.jll.com
www.icononthepromenade.proposals.jll.com
www.immobilier.jll.be
www.integral.co.uk
www.jllimmo.be
www.jllimmo.lu
www.jlloverview.com
www.jlloverviewtest.com
www.mcleanroad.resource.jll.com
www.midatlantictenantrep.proposals.jll.com
www.mission-towers.proposals.jll.com
www.missiontest.proposals.jll.com
www.nespresso.proposals.jll.com
www.nextgeneration-initiative.co.uk
www.pdsseattle.proposals.jll.com
www.propertytriathlon.com
www.realestate.jll.be
www.retailcre.resource.jll.com
www.ridgeviewmedicalcenter.proposals.jll.com
www.showcaseoriginal.proposals.jll.com
www.sita.proposals.jll.com
www.sutterhealth.proposals.jll.com
www.t3rino.proposals.jll.com
www.t3rino.resource.jll.com
www.tenrep.marktopitch1.proposals.jll.com
www.tenrep.marktoseattle.proposals.jll.com
www.testing.proposals.jll.com
www.theblvdpitch.proposals.jll.com
www.thefoundry.proposals.jll.com
www.theshopsatwailea.proposals.jll.com
www.transformingrealestate.jll.co.uk
www.vastgoed.jll.be
www.waterfordatbluelagoon.proposals.jll.com

Other certificates including the domain name jll.com

(limited to 100 certificates)
*.ap.jll.com
access.jll.com
www.jllproperty.com
compensationplanning.jll.com
ambitions.jll.com
sansites.jll.com
*.ap.jll.com
investor.jll.com
oneeightyst-dev.jll.com
Projectsapp.jll.com
bpm.jll.com
flexspace.jll.com
proposals.jll.com
immobilier.jll.fr
1441blake.proposals.jll.com
lyncweb-ext-01.am.jll.com
nxtinvest.eu.jll.com
perspectives.jll.com
lyncweb-ext-01.am.jll.com
www.joneslanglasalle.com
tourpointapp.jll.com
ontariosystems.proposals.jll.com
cds2.cvent.com
help.celerity-uk.com
inbom01tsbp002.ap.jll.com
cds2.cvent.com
hybridworks-qa.jll.com
www.joneslanglasalle.com
fr-nxt.eu.jll.com
capitalmarkets.jll.com
charlotteofficemove.resource.jll.com
dev-bpm.jll.com
*.jll.com
fsus-14.freshservice.com
forum.jllcab.live.jll.com
capitalmarkets.jll.com
webmail.am.joneslanglasalle.com
ask.jll.com
propertytemplate.proposals.jll.com
MapIT.EU.JLL.COM
immobilier.jll.lu
cds2.cvent.com
jllapple.live.jll.com
www.arpm.conference.jll.com
lilexpc02.am.jll.com
*.ap.jll.com
fsus-14.freshservice.com
www.thefoundry.proposals.jll.com
globalsustainability.conference.jll.com
cds2.cvent.com
webmail.am.joneslanglasalle.com
hiddengem.conference.jll.com
rmr.proposals.jll.com
shelbournecleveland.proposals.jll.com
www.joneslanglasalle.com
red-preprod.jll.com
authn.jll.com
brandhub.jll.com
*.ap.jll.com
8995airportroad.resource.jll.com
jll-sbx-okta.jll.com
jvdriver.resource.jll.com
tours.prd.propertycapsule.com
clientview-dev.jll.com
my-world.eu.jll.com
www.openavm.com
oneeightyst-dev.jll.com
bpm.jll.com
extapps.jll.com
slotdemo.proposals.jll.com
ambitions.jll.com
hiddengem.conference.jll.com
fed.jll.com
dev-bpm.jll.com
azdeptestprod.jll.com
*.ap.jll.com
lyncpool01.am.jll.com
jll.com.sg
nxtretail.eu.jll.com
authn.jll.com
fsus-14.freshservice.com
red-preprod.jll.com
nxtretail.eu.jll.com
webmail.eu.joneslanglasalle.com
fed.jll.com
*.ap.jll.com
immobilier.jll.fr
vdcexpe01.am.jll.com
capitalmarket-dev.jll.com
www.jllproperty.com
owamail.am.jll.com
clientview-dev.jll.com
sansites5.jll.com
sts.am.jll.com
multifamilyeastcoast.conference.jll.com
www.openavm.com
fsus-14.freshservice.com
jll.com.sg
medline.proposals.jll.com
commuter.eu.jll.com

Certificate

The complete raw certificate details for sansites.jll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkG8C67q0/AaqqIrGqE2/N5A8KSoc
b5+ZYqBc4SQJbqedlETzia10DaQ2EpCRLPI9LPE072j68X+8kRj66witSw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12919065289893477435493450282687011723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle IP, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sansites.jll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004906f02ebbab4fc06aaa88ac6a84dbf37903c292a1c6f9f9962a05ce124096ea79d9444f389ad740da4361290912cf23d2cf134ef68faf17fbc9118faeb08ad4b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcd04317b8f5851b1305a2ed2cb2fe136912fc16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sansites.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '111dunsmuir.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1155robson.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brg.jllhub-dev.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brg.jllhub-qa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brg.jllhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzz.jllhub-qa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzz.jllhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradononprofit.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denverimmersiveinnovation.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-site.atginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DTP-CJ.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtp-h.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DTP-IH.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmontonproperties.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllimmo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllimmo.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlloverview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlloverviewtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakesidesquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.jllhub-dev.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.jllhub-qa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.jllhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lodsys-jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentorship.jllhub-dev.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentorship.jllhub-qa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentorship.jllhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mplsevents.conference.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextgeneration-initiative.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer2021gwsannualreport.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfizer2022gwsannualreport.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgs2021annualreport.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgs2022annualreport.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsburghpds.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertytriathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-site.atginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenrep.marktopitch1.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenrep.marktoseattle.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transformingrealestate.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.11901olive.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1231thirdstreetpromenade.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.155017th.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.433ncamdendr.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adt.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allendale.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoconnected.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.galleria.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloveboxkw.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandriver.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icononthepromenade.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobilier.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllimmo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllimmo.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlloverview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlloverviewtest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcleanroad.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midatlantictenantrep.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mission-towers.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missiontest.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nespresso.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextgeneration-initiative.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdsseattle.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertytriathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retailcre.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridgeviewmedicalcenter.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.showcaseoriginal.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sita.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sutterhealth.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t3rino.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t3rino.resource.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenrep.marktopitch1.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenrep.marktoseattle.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testing.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblvdpitch.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefoundry.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theshopsatwailea.proposals.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.transformingrealestate.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vastgoed.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterfordatbluelagoon.proposals.jll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0090158f45466f5202223cbe8555a880afc5092fe11f1e40895347fbc42f05f787def0c2b4d5f5f0cf8e81b795e01b618aa8bb3c50422595f768b64c011845a3bb84b9569214374b385e8795d71949d21d2f76be07a50686a86c829db6fed50e54c8c199e29ba38688eaffcf57be3ef5bc6f88dcc92edd1594cfd7eacc58c6876f013e10b59a2604a126fffcd4e582fb2030dd179646bd2d9f141961231c62eab7ba539e55ac8e0c2c0a74fc051df5269d128dc25ce97a6e8e7848454848f4c52253cc0dfe3031d79bf90df31e01773f8cc4569c17084303197adeb4cb6f0d0c5da72a58555221982ce83c4db4e433f4ce17481d052da4e74628df278bdaab4b5c