sip3.ct950.com

- CallTower, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:fa:20:e1:68:69:64:07:91:26:76:7f:bc:af:fd:3d was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CallTower, Inc

Organization: CallTower, Inc
Organization unit: ASE
State / Province: Utah
Locality: South Jordan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:fa:20:e1:68:69:64:07:91:26:76:7f:bc:af:fd:3d
Serial Number (int): 13261793072455682934910508651080842557
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 59:24:18:6a:5b:f3:1c:e7:74:05:ee:61:2e:98:bb:d7:f1:e2:b0:75
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 97:fb:7e:04:7c:86:ec:0a:c0:cf:d6:97:07:ff:50:f8:73:23:b9:0b
Fingerprint (sha256): 05:40:68:3c:39:8f:c9:e6:53:71:59:e1:be:86:4b:9e:16:4d:35:90:bf:bb:e0:20:c8:3b:3a:e5:b4:1d:b7:64

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate sip3.ct950.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip3.ct950.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip3.ct950.com
ct950.com
sip.ct950.com
conf3.ct950.com
av3.ct950.com
sip.ctdemo08.com
sip.ctdemo06.com
sip.calltower.com
sip.ctdemo21.com
sip.esifme.com
sip.clauregroup.com
sip.sterlingorganization.com
sip.pointb.com
sip.pointbcap.com
sip.jjkllc.com
sip.natlfire.com
sip.tree.com
sip.pinnacleliving.com
sip.rhapsodyliving.ca
sip.girlscouts.org
sip.ifes.org
sip.lhfs.com
sip.ftch.net
sip.grimmlawdc.com
sip.applegatefarms.com
sip.nmlp.com
sip.interstatesteelco.com
sip.smbyhci.com
sip.acclaimrm.com
sip.phone.sncomm.com
sip.phone.tower16.com
sip.quiznos.com
sip.vpppa.org
sip.mcpc.com
sip.infinitypharm1.com
sip.uwbfco.org
sip.strategichotels.com
sip.galeratx.com
sip.pf-co.com
sip.bankatwestfield.com
sip.newhorizonsmn.com
sip.sovran.com
sip.thinkhwi.com
sip.edenredusa.com
sip.nutrisavings.com
sip.commuterbenefits.com
sip.oldam.com
sip.efpnow.com
sip.clevemed.com
sip.mgt-group.aero
sip.hpsx.com
sip.spinitar.com
sip.princetonrisk.com
sip.tlrgc.com
sip.itwmcconnect.com
sip.woodlandridgeatl.com
sip.metropower.com
sip.nahac.org
sip.videoray.com
sip.leschtlaw.com
sip.milestone-mgt.com
sip.cc.regis.edu
sip.oatey.us
sip.weissinc.com
sip.boingo.com
sip.pinnaclecampusliving.com
sip.diamondlawpa.com
sip.faganandassoc.com
sip.cloverbcm.com
sip.ebaengineering.com
sip.c3conferencing.com
sip.skyvest.com
sip.modernmeadow.com
sip.mosscm.com
sip.arcticglacier.com
sip.cressetwealth.com
sip.westfield-bank.com
sip.veriato.com
sip.bostonbrokerage.com
sip.monroecap.com
sip.cressetcap.com
sip.cressetpartners.com
sip.icesurance.com
sip.northernice.ca
sip.search1.com
sip.tu.org
sip.unitedconveyor.com
sip.psmpartners.com
sip.psmpllc.com
sip.asco.org
sip.minutemansenior.org
sip.monroecredit.com
sip.ncarb.org
sip.simonkonover.com
sip.rhonegroup.com
sip.northcentralepa.com
sip.cancerlinq.org
sip.conquer.org
sip.winplususa.com

Other certificates including the domain name ct950.com

(limited to 100 certificates)
sip3.ct950.com
sip51.ct950.com
sip3.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
s4b.ct950.com
sip3.ct950.com
sip41.ct950.com
sip3.ct950.com
sip61.ct950.com
sip41.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip43.ct950.com
sip51.ct950.com
sip.ct950.com
s4b.ct950.com
sip3.ct950.com
s4b.ct950.com
sip61.ct950.com
s4b.ct950.com
sip3.ct950.com
sip.ct950.com
sip.ct950.com
sip41.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
s4b.ct950.com
sip61.ct950.com
sip71.ct950.com
sip61.ct950.com
s4b.ct950.com
s4b.ct950.com
sip41.ct950.com
sip.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
sip71.ct950.com
s4b41.ct950.com
s4b.ct950.com
sip11.ct950.com
sip51.ct950.com
sip51.ct950.com
sip41.ct950.com
sip71.ct950.com
sip.ct950.com
sip71.ct950.com
sip51.ct950.com
sip51.ct950.com
sip31.ct950.com
sip41.ct950.com
sip.ct950.com
sip3.ct950.com
sip41.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
sip61.ct950.com
sip41.ct950.com
sip.ct950.com
sip51.ct950.com
sip61.ct950.com
sip.ct950.com
ct950.com
sip61.ct950.com
rp.ct950.com
sip41.ct950.com
sip51.ct950.com
sip3.ct950.com
sip61.ct950.com
sip51.ct950.com
sip71.ct950.com
s4b.ct950.com
sip51.ct950.com
sip43.ct950.com
sip61.ct950.com
sip3.ct950.com
sip51.ct950.com
sip41.ct950.com
s4b.ct950.com
sip61.ct950.com
cfe.ct950.com
sip.ct950.com
sip3.ct950.com
sip71.ct950.com
sip41.ct950.com
sip71.ct950.com
sip51.ct950.com
sip.ct950.com
sip61.ct950.com
sip71.ct950.com
sip41.ct950.com

Certificate

The complete raw certificate details for sip3.ct950.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA/PHD7bQJ4j1UCAomKG
5OdS2tzZVqaOdQpO1wz2A3VGD3bAgBizrPHgdEs/HGrwhBLZvjjDNeMht0vNQvCZ
WwPm/99W2IE0idI9rprvZ4oLUID59hlWhAdO4JuJxzoXvX+/6pq6nprHS2TGPF8s
ahO8GbzHUNh2W7dksygOkeI/Xd/2VKco8XNzNte9HyuEtdZPKh9uP7rsjJJGJE52
NkbYNTukAoA/Jgnwiyzk6xbGE4tk1tscAyB9k21LI4NaVWP6v5/VxITEhNIZSlug
DXWCmS+QImrrnA+cWkx4X3RlN7G4U/N051ZGRmoADbfQ9yH3MRmLhJj4WtDxsOXo
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13261793072455682934910508651080842557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-01 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Jordan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CallTower, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip3.ct950.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25255456713862803139934910049768641504596194596767343243258390767623270845110817695140023881616095690505040641454180730319811993113997088081927861401569470908119597104063405372195366127937080088425666305173826995264986515003764269377349837382372469228291216715922411975345601299407975776223436742590044268979987413765222060912534138561157162583708469244773144650341262804298113808767415709788927821165043656681362029583891715373107425922748101637873331086903041672002723292844989711506322520588710384443802358862577866886638605991962998507810545180558313851463291512772567980361420370220367918597243776105704415684629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5924186a5bf31ce77405ee612e98bbd7f1e2b075
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1922 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip3.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf3.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av3.ct950.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ctdemo08.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ctdemo06.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.calltower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ctdemo21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.esifme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.clauregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sterlingorganization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pointb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pointbcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.jjkllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.natlfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pinnacleliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rhapsodyliving.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.girlscouts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ifes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lhfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ftch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.grimmlawdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.applegatefarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nmlp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.interstatesteelco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.smbyhci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.acclaimrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.phone.sncomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.phone.tower16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.quiznos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.vpppa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mcpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.infinitypharm1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.uwbfco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.strategichotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.galeratx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pf-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bankatwestfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.newhorizonsmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sovran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.thinkhwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.edenredusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nutrisavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.commuterbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.oldam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.efpnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.clevemed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mgt-group.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hpsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.spinitar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.princetonrisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tlrgc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.itwmcconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.woodlandridgeatl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.metropower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.nahac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.videoray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.leschtlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.milestone-mgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cc.regis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.oatey.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.weissinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.boingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pinnaclecampusliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.diamondlawpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.faganandassoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cloverbcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ebaengineering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.c3conferencing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.skyvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.modernmeadow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.mosscm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.arcticglacier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cressetwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.westfield-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.veriato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bostonbrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.monroecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cressetcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cressetpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.icesurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.northernice.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.search1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.tu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.unitedconveyor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.psmpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.psmpllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.asco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.minutemansenior.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.monroecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ncarb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.simonkonover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rhonegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.northcentralepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cancerlinq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.conquer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.winplususa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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