content.aimatch.com
Issued by R3
About this certificate
This digital certificate with serial number 03:c9:6b:56:d9:31:4c:e2:12:41:5f:a3:30:58:64:cd:23:95 was issued on by Let's Encrypt.
With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=content.aimatch.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c9:6b:56:d9:31:4c:e2:12:41:5f:a3:30:58:64:cd:23:95Serial Number (int): 329876291884657049209388371711027204400021
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4b:49:f3:cd:bf:04:e1:4b:07:5a:cc:1b:a0:cc:6e:d9:f7:a9:ca:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 32:9c:5c:88:5d:81:a6:30:32:5d:e1:bc:98:8c:75:46:c1:ea:a1:df
Fingerprint (sha256): 02:47:54:6f:1c:8a:1c:a4:ad:ed:62:32:4b:bc:01:8e:a7:70:c6:5f:9f:12:de:93:36:98:10:85:b4:5b:ed:b8
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate content.aimatch.com
66
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for content.aimatch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canary-content.360match.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.pl
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.pl
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360-test.vodafone.com.au
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.digitalalchemy.net.au
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.jyskebank.dk
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.ruv.de
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.vodafone.com.au
content-ci360.wcm2-jyskebank-dk-s.bdunet.dk
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.aimatch.com
content.kbinfo.cz
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
test-akamai.aimatch.com
usincm-content.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.pl
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.pl
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360-test.vodafone.com.au
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.digitalalchemy.net.au
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.jyskebank.dk
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.ruv.de
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.vodafone.com.au
content-ci360.wcm2-jyskebank-dk-s.bdunet.dk
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.aimatch.com
content.kbinfo.cz
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
test-akamai.aimatch.com
usincm-content.mktg.sas.com
Other certificates including the domain name aimatch.com
(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com
Certificate
The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKuzCCCaOgAwIBAgISA8lrVtkxTOISQV+jMFhkzSOVMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA0MDkxNjM3MTJaFw0yMjA3MDgxNjM3MTFaMB4xHDAaBgNVBAMT E2NvbnRlbnQuYWltYXRjaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCpsj6/zMyprA/3zZ+kCcXlj7lRlnyP48I4PdABSzh7xVVlU9qaZqtBayL8 OmRA2D7QA9Sd6fsInf29poTE5429Hk4SN6FqY5eonTSD/dxyUKTdQlSp4QuwDn7u NxwgFWILrZhw7zdxaGrbC1aEHcRbD45UCL/I45Iyw140XMVS6sZD1PBAXtnmek+o cMpIndhFHrUObs9BFS7p821rntp+c3Nd3IjtbnfTu1Q+6y3A33d5wSzRkOO/DjOA eGjwpCyH3VVW5W8uZcWS06Ro54zHt/Mn6uZhINm6zOWqcE1sPgpuy+DxALcsnlWp bBp3Fv7V4HyFxcVDB+qUbvX74ZKNAgMBAAGjggfdMIIH2TAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFEtJ882/BOFLB1rMG6DMbtn3qcrvMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIGngYDVR0RBIIGlTCCBpGCJGNhbmFyeS1jb250ZW50LjM2MG1hdGNo Lm1rdGcuc2FzLmNvbYIVY2ljbnRuLnByb2R1YmFuY28uY29tghpjb24ubW0uZG0t ZHJvZ2VyaWVtYXJrdC5hdIIaY29uLm1tLmRtLWRyb2dlcmllbWFya3QuYmGCGmNv bi5tbS5kbS1kcm9nZXJpZW1hcmt0LmJnghpjb24ubW0uZG0tZHJvZ2VyaWVtYXJr dC5pdIIaY29uLm1tLmRtLWRyb2dlcmllbWFya3Qucm+CDGNvbi5tbS5kbS5hdIIM Y29uLm1tLmRtLmN6ggxjb24ubW0uZG0uZGWCDGNvbi5tbS5kbS5ocoIMY29uLm1t LmRtLmh1ggxjb24ubW0uZG0ubWuCDGNvbi5tbS5kbS5wbIIMY29uLm1tLmRtLnJz ggxjb24ubW0uZG0uc2mCEGNvbi5tbS5tb2phZG0uc2uCHGNvbi50Lm1tLmRtLWRy b2dlcmllbWFya3QuYmeCDmNvbi50Lm1tLmRtLmF0gg5jb24udC5tbS5kbS5jeoIO Y29uLnQubW0uZG0uZGWCDmNvbi50Lm1tLmRtLmhygg5jb24udC5tbS5kbS5odYIO Y29uLnQubW0uZG0ucGyCDmNvbi50Lm1tLmRtLnNpghJjb24udC5tbS5tb2phZG0u c2uCH2NvbnRlbnQtMzYwLWNpY29sdXNwLmN4dHJ2bC5jb22CHGNvbnRlbnQtY2kz NjAtYXQzLmFsdGlib3gubm+CJGNvbnRlbnQtY2kzNjAtbm9ucHJvZC51c2NlbGx1 bGFyLmNvbYIiY29udGVudC1jaTM2MC10ZXN0LnZvZGFmb25lLmNvbS5hdYIYY29u dGVudC1jaTM2MC5hbHRpYm94Lm5vgh1jb250ZW50LWNpMzYwLmNsdWJwcmVtaWVy LmNvbYIhY29udGVudC1jaTM2MC5jb29wZm9yc2lrcmluZ2VyLmRrgiNjb250ZW50 LWNpMzYwLmRpZ2l0YWxhbGNoZW15Lm5ldC5hdYIYY29udGVudC1jaTM2MC5lbGFu eW8uY29tgiVjb250ZW50LWNpMzYwLmZvb3RiZWxzaXRlLWFjYy5yYmZhLmJlgiNj b250ZW50LWNpMzYwLmZyYW5rZnVydC1haXJwb3J0LmNvbYIZY29udGVudC1jaTM2 MC5nZW5lcmFsaS5za4IaY29udGVudC1jaTM2MC5pZGF0ZW4ubmUuanCCGmNvbnRl bnQtY2kzNjAuanlza2ViYW5rLmRrghVjb250ZW50LWNpMzYwLmtpd2kubm+CFWNv bnRlbnQtY2kzNjAua252Yi5ubIIZY29udGVudC1jaTM2MC5tYWdhemluZS5ubIIm Y29udGVudC1jaTM2MC5tYXJrZXRpbmcub2ZmaWNlZGVwb3QuZXWCFWNvbnRlbnQt Y2kzNjAubWVueS5ub4IYY29udGVudC1jaTM2MC5uYXR1cmUub3Jngh5jb250ZW50 LWNpMzYwLnBhdWxmcmVkcmljay5jb22CFWNvbnRlbnQtY2kzNjAucmJmYS5iZYIU Y29udGVudC1jaTM2MC5ydXYuZGWCG2NvbnRlbnQtY2kzNjAudG9wZGFubWFyay5k a4IWY29udGVudC1jaTM2MC50cnVtZi5ub4IcY29udGVudC1jaTM2MC51c2NlbGx1 bGFyLmNvbYIdY29udGVudC1jaTM2MC52b2RhZm9uZS5jb20uYXWCK2NvbnRlbnQt Y2kzNjAud2NtMi1qeXNrZWJhbmstZGstcy5iZHVuZXQuZGuCH2NvbnRlbnQtY2kz NjAud29ybGR3aWxkbGlmZS5vcmeCI2NvbnRlbnQta2NsaWVudGQtY2kzNjAud2Fm YXNhbGFmLm1hgiNjb250ZW50LWtjbGllbnRwLWNpMzYwLndhZmFzYWxhZi5tYYId Y29udGVudC10ZXN0LWNpMzYwLm5hdHVyZS5vcmeCE2NvbnRlbnQuYWltYXRjaC5j b22CEWNvbnRlbnQua2JpbmZvLmN6ghRjb250ZW50Lm1rdGcuc2FzLmNvbYIRY29u dGVudC5vZHQuY28ubnqCGW1zY29udGVudC5tb3JuaW5nc3Rhci5jb22CF3N0YXRp Y2NvbnRlbnQubXljd3QuY29tghd0ZXN0LWFrYW1haS5haW1hdGNoLmNvbYIbdXNp bmNtLWNvbnRlbnQubWt0Zy5zYXMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO UyY1tWN8slLDB+pzvBtIg80Fg8St9Zj19Wd+gM6dPgzbPZB8T1dodnsGXsnsuDEQ dyAzSBbi4pNGsa3gtKeXbJbRcbYdrD0PBTU25vsG+B76U6sBQ6Ikh/GhxxtUHGLM HRPU/AmvBcGshdIrP1z5agCrqk7+vxKOu+f1qIJ8Mp49H4roSg16+ULEVKT/IMS2 u+yaKtWtr3Gch4VtJBYBy/IjqwGCyx+AAPjD6fPqF5JMLes4QxRH5VcS/3e0vQft 4SF+YWcTTmhtYjdJa3LHlUCarVBX71A1q5VB1dUkG7B2GOl1oQ+LCdHgZMsx+Gsy wDmxsatr2MTb2dDfxaBy -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbI+v8zMqawP982fpAnF 5Y+5UZZ8j+PCOD3QAUs4e8VVZVPammarQWsi/DpkQNg+0APUnen7CJ39vaaExOeN vR5OEjehamOXqJ00g/3cclCk3UJUqeELsA5+7jccIBViC62YcO83cWhq2wtWhB3E Ww+OVAi/yOOSMsNeNFzFUurGQ9TwQF7Z5npPqHDKSJ3YRR61Dm7PQRUu6fNta57a fnNzXdyI7W5307tUPustwN93ecEs0ZDjvw4zgHho8KQsh91VVuVvLmXFktOkaOeM x7fzJ+rmYSDZuszlqnBNbD4Kbsvg8QC3LJ5VqWwadxb+1eB8hcXFQwfqlG71++GS jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329876291884657049209388371711027204400021 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-09 16:37:12 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 16:37:11 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21422169480970835740625908329168782357649430657754584265602299268703365807266716052860627343664569175110747539240984202372577490898624907209966890983971675678009148471188830455989494543958383634053033702268115125210579023540063441236621674082859982661973833193309971003812334437041902087621923102622312445268359292894613494830055872271172295416747605374228718407034651243229928048091009177116874710061394583772336416614784726588406684681697840263943745046377035292071533122056692688418428607179304922580826644872864016272560776507778006554230619781991979747592549799297359961777319880914159536894227529024674273006221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4b49f3cdbf04e14b075acc1ba0cc6ed9f7a9caef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1685 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-content.360match.mktg.sas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicntn.produbanco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.mojadm.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.mojadm.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicolusp.cxtrvl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-at3.altibox.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-nonprod.uscellular.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-test.vodafone.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.altibox.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.clubpremier.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.coopforsikringer.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.digitalalchemy.net.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.elanyo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.footbelsite-acc.rbfa.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.frankfurt-airport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.generali.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.idaten.ne.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.jyskebank.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.kiwi.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.knvb.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.magazine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.marketing.officedepot.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.meny.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.nature.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.paulfredrick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.rbfa.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.ruv.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.topdanmark.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.trumf.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.uscellular.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.vodafone.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.wcm2-jyskebank-dk-s.bdunet.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.worldwildlife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientd-ci360.wafasalaf.ma' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientp-ci360.wafasalaf.ma' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-test-ci360.nature.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.kbinfo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mktg.sas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.odt.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscontent.morningstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticcontent.mycwt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-akamai.aimatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-content.mktg.sas.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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