san2988.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b0:b7:33:0a:f8:0b:a6:c9:b5:d1:34:6c:d0:12:74:b7:ef was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san2988.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b0:b7:33:0a:f8:0b:a6:c9:b5:d1:34:6c:d0:12:74:b7:ef
Serial Number (int): 408582354057970867346397929979970084714479
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:f8:b2:af:c1:35:0d:aa:6f:5a:e5:e7:b1:97:1b:9d:09:53:84:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:35:84:a1:cb:99:34:3d:3a:b1:fa:48:ce:e1:fa:67:79:7d:df:1d
Fingerprint (sha256): 02:af:95:5d:79:8d:24:cb:7d:dd:d0:78:12:37:d3:c7:0e:14:5b:dd:76:fd:26:22:87:f4:1d:d9:3c:9e:06:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san2988.cdntwrk.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2988.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abm-app.ufcontent.com
advisor.ufcontent.com
affirma.ufcontent.com
affirma2.ufcontent.com
agupta.ufcontent.com
alayacareaunz.ufcontent.com
amdocs.ufcontent.com
appfollio2.ufcontent.com
aragonresearch.ufcontent.com
arcticwolf-uk.ufcontent.com
arcticwolftv2.ufcontent.com
arisglobal2.ufcontent.com
arisglobalcustomer.ufcontent.com
arisglobalinternal.ufcontent.com
armadacare.ufcontent.com
australia-fortinet-tv2.ufcontent.com
b2lead.ufcontent.com
bdrdemo.ufcontent.com
bombbomb2.ufcontent.com
brandeddemo.ufcontent.com
brightpattern.ufcontent.com
build-rubine.ufcontent.com
build-wilkins.ufcontent.com
chaseivany.ufcontent.com
cpryztocki.ufcontent.com
cybersecure.ufcontent.com
deltek.ufcontent.com
dev18298.relevantize.com
domainteststeve.relevantize.com
emea-cea-resources.awscloud.com
emea-es-resources.awscloud.com
emea-fr-resources.awscloud.com
emea-it-resources.awscloud.com
emersone360.ufcontent.com
envoy-tm-hf-test.ufcontent.com
essentialaccessibility.ufcontent.com
fortinet-gb-tv2.ufcontent.com
fortinet-german-tv2.ufcontent.com
fortinet-latam-tv2.ufcontent.com
fortinet-portuguese-tv2.ufcontent.com
french-fortinet-tv2.ufcontent.com
fujitsu.ufcontent.com
genpact.ufcontent.com
geosystems.ufcontent.com
gh.ufcontent.com
ibm.ufcontent.com
industry-insights.appfolio.com
infoblox.ufcontent.com
ingrammicro-security-apac.ufcontent.com
ingrammicro-security-emea.ufcontent.com
ingrammicro-security-latam.ufcontent.com
ingrammicro-security.ufcontent.com
insights.ingrammicro.ca
intellimize.ufcontent.com
iqviademo.ufcontent.com
jabra.ufcontent.com
jacquied.ufcontent.com
jll.ufcontent.com
jp-tv1.ufcontent.com
jp-tv2.ufcontent.com
jtc.ufcontent.com
kennasecurity.ufcontent.com
keysightu.ufcontent.com
launchdarkly.ufcontent.com
learn.credly.com
medallia.ufcontent.com
mrogers.ufcontent.com
netwoven.ufcontent.com
newsela.ufcontent.com
progress.ufcontent.com
proofofconcept.ufcontent.com
quantummetric.ufcontent.com
reciprocitylabsdemo.ufcontent.com
redhat.ufcontent.com
resources.bettercloud.com
resources.cotiviti.com
resources.maxar.com
resources.pas.com
resources.smartlinx.com
resources.vistavusolutions.com
rfxcel.ufcontent.com
san2988.cdntwrk.com
signifyhealth.ufcontent.com
snhu.ufcontent.com
spearmarketing.ufcontent.com
sq.ufcontent.com
stevenewtest.relevantize.com
stgwatchguard.ufcontent.com
streams.watchguard.com
synup.ufcontent.com
thales.ufcontent.com
themesdemo.ufcontent.com
trimble-tv2-123167.ufcontent.com
trimble-tv2-124385.ufcontent.com
trimble-tv2-70960.ufcontent.com
trimble-tv2-87110.ufcontent.com
ufzd-int.ufcontent.com
us-fortinet-tv2.ufcontent.com
verizonbusiness2.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san2988.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq2xaB1GD2VytQ997sNS
nh4IUjw8MQuYwoXu6jtkRAyYnrC8sGoo/uOYSeFd9RY/epzKPSz7lejBaw4VGq1y
fyfY9B+RkNxkNJ3UfMzVSGaPuFx/SzBlILbnSmppkUqbBjhaWDfbMsfmGNM54sMr
L5wUG3+jL9ykglPZ+bRJhPOXT8GhAeTXTYnqrhS0sqf5VDf0XbDOGRAK8DmdGQOA
Oahfrma8PvMzoQ56d+8l/aSIloREBWqYI1dMmA51/qL09PZji0Vy68QPLyKDUSo/
uYBjF9LhORc8tlA2bzbNJAeHjL8YA64DMvJyotUdkOojVUXqHFzRS5S1gPaLPjsT
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408582354057970867346397929979970084714479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-28 14:09:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-29 14:09:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san2988.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19526350172826851914242378921151005631077959601349893174653553585779265587730243619543285198208075866084981946897412474429634546059376319403194179725069875231840589460845007631714134584731634685854573207378893598796423455557958786348923104239741215687671250253852059922014959238424878017083404651992364708764571237788882509521654786571343664850550230851982672975356079708078468808476926975772565304788555073022954813316407766731238409295829450274501771548349319804305243734318342955956187914823691138861180238724682501544543931880635134569526460824539700768674611357886005775562797017278267462471624920272938506851131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3f8b2afc1350daa6f5ae5e7b1971b9d09538437
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2710 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abm-app.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirma.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affirma2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agupta.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alayacareaunz.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdocs.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appfollio2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aragonresearch.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcticwolf-uk.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcticwolftv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisglobal2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisglobalcustomer.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arisglobalinternal.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armadacare.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australia-fortinet-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2lead.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdrdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bombbomb2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandeddemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightpattern.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-rubine.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-wilkins.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaseivany.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpryztocki.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersecure.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltek.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev18298.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainteststeve.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea-cea-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea-es-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea-fr-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea-it-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emersone360.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoy-tm-hf-test.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialaccessibility.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinet-gb-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinet-german-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinet-latam-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinet-portuguese-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french-fortinet-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujitsu.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genpact.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geosystems.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gh.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry-insights.appfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoblox.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingrammicro-security-apac.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingrammicro-security-emea.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingrammicro-security-latam.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingrammicro-security.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ingrammicro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellimize.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqviademo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabra.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacquied.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-tv1.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jtc.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennasecurity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysightu.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchdarkly.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.credly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medallia.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrogers.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netwoven.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsela.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progress.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofofconcept.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantummetric.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reciprocitylabsdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhat.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.bettercloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cotiviti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.maxar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.pas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.smartlinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.vistavusolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfxcel.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2988.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signifyhealth.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snhu.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spearmarketing.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sq.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenewtest.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgwatchguard.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streams.watchguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synup.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thales.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themesdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimble-tv2-123167.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimble-tv2-124385.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimble-tv2-70960.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimble-tv2-87110.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufzd-int.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-fortinet-tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verizonbusiness2.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a55858fc1435f7473a1968287179a3f133234bbd3e05b801fd6495528f1fda4c7b180d5f21bc17e02cc9035264abec064215a2295f99a606d5415ecde77a8d5564bf6ba9615591e899ff4ef99099b3c259a10cc3b18770416714d13b919c0e5f0128975f896c20d1b2d376a2b2ea7eab79f1c1549acd817ba871ef81f9f5b7650f762a78455629757cd0c98b78c2db77579d7b6877c2e380abcc15a8a891b87bd2ad20a7042982b9c39ca8d47c4d7a4e71990a14827da7f4a36c75f6583fe3041b7cdc4e7949927688a858b44b2e6fe255392a68bbbda79e65c0b55e1cbb539d09f7cfb225f1c7a5b8adcac4040be0c552ab9c27ef5b82909778ce82c4e5cbe