s4b.ct950.com

- CallTower, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:79:e8:37:7f:ae:8d:cf:d1:41:4a:89:fd:2a:01:b6 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CallTower, Inc

Organization: CallTower, Inc
Organization unit: ASE
State / Province: Utah
Locality: South Jordan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:79:e8:37:7f:ae:8d:cf:d1:41:4a:89:fd:2a:01:b6
Serial Number (int): 12596029798039561498415669071804236214
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:2e:75:ba:2e:06:56:6e:fa:e3:bb:4a:40:fe:63:0a:d8:fa:31:04
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 39:7b:63:4e:58:e3:a8:35:19:af:26:2e:4a:5d:8b:7f:24:65:35:5f
Fingerprint (sha256): 05:32:e6:38:d0:49:ae:b6:82:a7:1d:ea:e5:61:9e:c4:fc:4b:6c:f9:18:9a:9e:ec:5d:f0:f4:80:03:34:74:9b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate s4b.ct950.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s4b.ct950.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s4b.ct950.com
meet.ct950.com
dialin.ct950.com
lyncdiscover.ct950.com
lyncdiscover.res.us
lyncdiscover.anglerenvironmental.com
lyncdiscover.carmelpartners.net
lyncdiscover.cdlfu.org
lyncdiscover.cloverbcm.com
lyncdiscover.dwsteel.com
lyncdiscover.ebaengineering.com
lyncdiscover.empirepetroleum.com
lyncdiscover.ltfoodsamericas.com
lyncdiscover.mmrs.com
lyncdiscover.pointbcap.com
lyncdiscover.pointb.com
lyncdiscover.sucampo.com
lyncdiscover.voaches.org
lyncdiscover.worksoft.com
lyncdiscover.calltower.com
lyncdiscover.mercurymedia.com
lyncdiscover.pucschools.org
lyncdiscover.syska.com
lyncdiscover.hartmanadvisors.com
lyncdiscover.ctdemo12.com
lyncdiscover.boingo.com
lyncdiscover.lhfs.com
lyncdiscover.nms.org
lyncdiscover.wideorbit.com
lyncdiscover.ninthdecimal.com
lyncdiscover.zerotothree.org
lyncdiscover.transpogroup.com
lyncdiscover.naocean.com
lyncdiscover.migcorp.net
lyncdiscover.polarisgm.com
lyncdiscover.asisonline.org
lyncdiscover.west-chester.com
lyncdiscover.gogsf.com
lyncdiscover.psgconsults.com
lyncdiscover.naproperties.com
lyncdiscover.blendtec.com
lyncdiscover.wrtdesign.com
lyncdiscover.spoken.com
lyncdiscover.monatglobal.com
lyncdiscover.greystonecommunities.com
lyncdiscover.searchwizards.com
lyncdiscover.plankindustries.com
lyncdiscover.accds.com
lyncdiscover.jmpco.com
lyncdiscover.onenorth.com
lyncdiscover.bmpc-law.com
lyncdiscover.carrprop.com
lyncdiscover.ffnm.org
lyncdiscover.goldenstatelumber.com
lyncdiscover.guentner.com.mx
lyncdiscover.hssi.com
lyncdiscover.macmiller.com
lyncdiscover.shawconstruction.net
lyncdiscover.wm2a.com
lyncdiscover.qual-pro.com
lyncdiscover.knowledgelake.com
lyncdiscover.persante.com
lyncdiscover.purelycloud.com
lyncdiscover.eonreality.com
lyncdiscover.suebausa.com
lyncdiscover.rff.org
lyncdiscover.voloridge.com
s4b3.ct950.com
lyncdiscover.ncqa.org
lyncdiscover.operationsmile.org
lyncdiscover.pepperconstruction.com
lyncdiscover.perkinseastman.com
atls4b.ct950.com
s4b1.ct950.com
lyncdiscover.strategichotels.com
s4b41.ct950.com
s4b02.ct950.com
s4b42.ct950.com
lyncdiscover.pinnaclecampusliving.com
lyncdiscover.cdlf.org
lyncdiscover.gofox.com
lyncdiscover.foxworldtravel.com
lyncdiscover.westfield-bank.com

Other certificates including the domain name ct950.com

(limited to 100 certificates)
sip3.ct950.com
sip51.ct950.com
sip3.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
s4b.ct950.com
sip3.ct950.com
sip41.ct950.com
sip3.ct950.com
sip61.ct950.com
sip41.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip43.ct950.com
sip51.ct950.com
sip.ct950.com
s4b.ct950.com
sip3.ct950.com
s4b.ct950.com
sip61.ct950.com
s4b.ct950.com
sip3.ct950.com
sip.ct950.com
sip.ct950.com
sip41.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
s4b.ct950.com
sip61.ct950.com
sip71.ct950.com
sip61.ct950.com
s4b.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
sip71.ct950.com
s4b41.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
sip51.ct950.com
sip41.ct950.com
sip71.ct950.com
sip.ct950.com
sip71.ct950.com
sip51.ct950.com
sip51.ct950.com
sip31.ct950.com
sip41.ct950.com
sip.ct950.com
sip3.ct950.com
sip41.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
ct950.com
sip61.ct950.com
rp.ct950.com
sip41.ct950.com
sip51.ct950.com
sip3.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
s4b.ct950.com
sip51.ct950.com
sip43.ct950.com
sip61.ct950.com
sip3.ct950.com
sip51.ct950.com
sip41.ct950.com
s4b.ct950.com
sip61.ct950.com
cfe.ct950.com
sip.ct950.com
sip3.ct950.com
sip71.ct950.com
sip41.ct950.com
sip71.ct950.com
sip51.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
sip41.ct950.com

Certificate

The complete raw certificate details for s4b.ct950.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBG2BzQ/y37lqYVFjP3H
F52iCg3/6O0Vnkp5rfxBxaHaHy+YDYdxwuvXd0+duS/xulUtBwgQ5tpEkP2W5ef/
AuckByoCz6ZjD2hg7V+M0lAW6WcMu95dp3DeH7sC5czkja2M7M1Z9EkPv+mY/xmC
HvLP/eNk2x4hHR6+OCjW6jzApi3O8OL50Mv7odAg0MgPhOq2EzAcfXi44k1ZQSjm
KDSbGRUghOTlkNlmI46q9gmZhzGlLmJDSmxlHO5mGfI4+IQPhXVQ6HHWSPl7dHJg
PmZva/DaTu4gDRdTXsrSWzqMjzD28jNvZkUdTQfe7TsH8KrjFvurfkHg9MzST1ri
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12596029798039561498415669071804236214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Jordan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CallTower, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's4b.ct950.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18692002777969679171896486604941820390847561924971109783209790478784751822786668991033133118910498756787134637753350183202895540761389776576016093204238736824582936135493608089765754188790784066395189433784554143355910745140201793270139052171956705146286634492312302552704199821341967330135009642872149420146338048059868731630965434828715593554613511242715414451655229440906299414519553019439747560955034236938055946363041724126450083759829680714333665725757406583321818381548812065052854527708652016481007618052899882990798688512927682238658407208598234471314806459343803930232527228290252150113018563330882924110481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b52e75ba2e06566efae3bb4a40fe630ad8fa3104
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.res.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.anglerenvironmental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carmelpartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cdlfu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cloverbcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.dwsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ebaengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.empirepetroleum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ltfoodsamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mmrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pointbcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sucampo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.voaches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.worksoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.calltower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mercurymedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pucschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.syska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hartmanadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ctdemo12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.boingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lhfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nms.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wideorbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ninthdecimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.zerotothree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.transpogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.naocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.migcorp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.polarisgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.asisonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.west-chester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gogsf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.psgconsults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.naproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.blendtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wrtdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.spoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.monatglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.greystonecommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.searchwizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.plankindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.accds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.jmpco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.onenorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmpc-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carrprop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ffnm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.goldenstatelumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.guentner.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hssi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.macmiller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.shawconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wm2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.qual-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.knowledgelake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.persante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.purelycloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.eonreality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.suebausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rff.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.voloridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b3.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ncqa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.operationsmile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pepperconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.perkinseastman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atls4b.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b1.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.strategichotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b41.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b02.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4b42.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pinnaclecampusliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cdlf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gofox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.foxworldtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.westfield-bank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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