www.highq.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number aa:68:c4:31:1d:73:14:35:ca:59:d1:6f:91:2d:0f:3d was issued on by Sectigo Limited.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.highq.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): aa:68:c4:31:1d:73:14:35:ca:59:d1:6f:91:2d:0f:3d
Serial Number (int): 226512737400299786587032705804119379773
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e2:8b:b4:22:f2:01:59:fe:ff:ea:89:e9:6b:64:1c:11:a7:be:f3:64
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): a7:8f:ff:a7:da:ad:63:b3:6d:52:3a:3a:f0:04:3e:88:58:3a:a4:59
Fingerprint (sha256): 05:40:e2:f8:61:79:c0:cd:21:d2:df:d4:2a:00:76:7b:5e:28:9c:ef:97:97:72:e3:59:ce:60:df:d5:54:5c:ad

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.highq.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.highq.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.highq.com
acccollaborate.acc.com
aosphere.biz
claytonutz.highqsolutions.com
clientconnect.drinkerbiddle.com
clientportal.carpmaels.com
clientportal.pelsrijcken.nl
clientportal.wottonkearney.com
clients.bellgully.com
clients.cgsh.com
clients.linklaters.com
clientsite.steptoe.com
clientsite.twobirds.com
collaborate.allens.com.au
collaborate.bakerdonelson.com
collaborate.garrigues.com
collaborate.highq.com
collaborate.mauriceblackburn.com.au
collaborate.mcmillan.ca
collaborate.minterellison.com
collaborate.nelsonmullins.com
collaborate.phrd.com
collaborate.vinge.se
collaborate2.highqsolutions.com
collaborate3uat.highqsolutions.com
collaborateaus1.highq.com
collaboratetest.highq.com
collaborateuat.highqsolutions.com
connect.compliancewise.nl
connect.debrauw.com
connect.horten.dk
connect.olswang.com
connect.svw.no
connect2.cliffordchance.com
corrs.highq.com
dataroom.bahr.no
dataroom.onxeo.com
dataroom.wr.no
datarooms.gorrissenfederspiel.com
datarooms.herbertsmithfreehills.com
datarooms.macquarie.com
dealroom.foglers.com
dealroom.nabarro.com
dealroom.simmons-simmons.com
dealrooms.nortonrosefulbright.com
dev.highq.com
direct.dentons.com
eshore.highq.com
eurhighq.sidley.com
evernet.eversheds.com
extranet.accura.dk
extranet.cederquist.se
extranet.debevoise.com
extranet.kammeradvokaten.dk
extranets.ashurst.com
forum.vandoorne.com
groom.highq.com
highq.pascuayaqui-nsn.gov
highq.sidley.com
hqa1uae1.highq.com
hqa1uk1.highq.com
hqa1uk2.highq.com
hqa1us1.highq.com
hqa1us2.highq.com
law.franklintn.gov
legal.lazurite.co
legal.tel.com
legal.wellspan.highq.com
us-authorities.informationexchange.mercedes-benz.highq.com
vdr.macroberts.com

Other certificates including the domain name highq.com

(limited to 100 certificates)
cwp.status.symantec.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
andrei.sterda.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ccd.status.symantec.com

www.highq.com
cc3.status.jasper.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
www.highq.com
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
thomsonreuters.com
api-status.360cities.net
www.highq.com
www.highq.com
cc3.status.jasper.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

*.hqdev.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
offers.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
highq.com
offers.highq.com
cwp.status.symantec.com
www.highq.com
www.highq.com
www.highq.com
eboks-status.reepay.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
www.highq.com
support2.cdnetworks.net
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.highq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN0zCCDLugAwIBAgIRAKpoxDEdcxQ1ylnRb5EtDz0wDQYJKoZIhvcNAQELBQAw
gY8xCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE3MDUGA1UE
AxMuU2VjdGlnbyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0yMjAzMjIwMDAwMDBaFw0yMzAxMTQyMzU5NTlaMBgxFjAUBgNVBAMTDXd3
dy5oaWdocS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCtMk/3
QRx8efAnQ+SVuwFibKgMz3pbzK+hR5OwJG9DHpM+YnpPKHdEiWuho+iXk5FaOVdx
BldVfT8q7CyYeeT62/qvaaI9psC5XugN3W01YXvOko+Dv2muYIpndHmRrTyLJ6k9
NDjnFbrbZMePxIUWZa2dCN/LpmjtNF4i/0W8RcwczwYnirxsX/YvWWzCUOoDHqJS
hzt4Yl3mC32WZznQpGE628a/IqRn6YbGOCMyLCFrPMYnF8O7gYo/x5m2IGE4+GdE
RScUGmgr9zJVOSkOOzhbQBw1GQdHd2omqRal0Ibc5uM02gQDZ6VYHVGnkT5332sV
UmV1qFJbaqAG2nJMfTRC+RGrqnf8am2/9Vc524HKSLAYZrkVaKJxc7COKY4U9S+m
VT45Qo75Hg2ttcIh7VMoN4dNGvpWTsR/pfkzxiQxFH4tCqKFTjFMRAp8DHww+w+X
DphkGicx7v9DwRBdBzFwM/BkHEn/NRTmglBnWNw8mAIAjpNgKjuo5NL/tdo6ZECA
NqeK/Do/Vt/lKParY3R7EgPMt4vEdMQ17UTf+pj8MCh26QZIRxk1U8MtzIcuYZ7m
RLL5aoT94aIANn0tx5Cui7Gwj+plnAxqth35RBtu59OPdnV/AOFI6rWZ08bFn9f0
xW75fLNktQkisfzsPo8TfgdKdkyhwaBkjeXZMwIDAQABo4IJnjCCCZowHwYDVR0j
BBgwFoAUjYxexFStiuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFOKLtCLyAVn+/+qJ
6WtkHBGnvvNkMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIH
MCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAEC
ATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3Rp
Z28uY29tL1NlY3RpZ29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0Eu
Y3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWG
NOvcgooAAAF/s7SWvQAABAMARzBFAiEAzuxezs9Uec5d4ArhAZKRo8+ooSpko+nX
+8EcBGdGU0sCIH8xj0QLFttJlaFNbEaON48g5+k7HPTOWenbiTAlyHiBAHYAejKM
VNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAF/s7SWdwAABAMARzBFAiBI
i5SmuBgWHz+sKYe2ONb2tk1YxRJQ3ZVZ/bl7HxxdVQIhANY/+e/wgAq3IMtQZfsT
aK8PlmuXJPqHhpM5fbcdInu3AHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3
fW0GvW4AAAF/s7SWVQAABAMARzBFAiAWnEhImzC/ddNnmMcP1dLE60wDH1mTzKMo
YJ9IT8Qi5AIhALatN/LDSfTZ3PN6Y6MhLL7+W/Fh2b5sMlBayax+U98wMIIGxQYD
VR0RBIIGvDCCBriCDXd3dy5oaWdocS5jb22CFmFjY2NvbGxhYm9yYXRlLmFjYy5j
b22CDGFvc3BoZXJlLmJpeoIdY2xheXRvbnV0ei5oaWdocXNvbHV0aW9ucy5jb22C
H2NsaWVudGNvbm5lY3QuZHJpbmtlcmJpZGRsZS5jb22CGmNsaWVudHBvcnRhbC5j
YXJwbWFlbHMuY29tghtjbGllbnRwb3J0YWwucGVsc3JpamNrZW4ubmyCHmNsaWVu
dHBvcnRhbC53b3R0b25rZWFybmV5LmNvbYIVY2xpZW50cy5iZWxsZ3VsbHkuY29t
ghBjbGllbnRzLmNnc2guY29tghZjbGllbnRzLmxpbmtsYXRlcnMuY29tghZjbGll
bnRzaXRlLnN0ZXB0b2UuY29tghdjbGllbnRzaXRlLnR3b2JpcmRzLmNvbYIZY29s
bGFib3JhdGUuYWxsZW5zLmNvbS5hdYIdY29sbGFib3JhdGUuYmFrZXJkb25lbHNv
bi5jb22CGWNvbGxhYm9yYXRlLmdhcnJpZ3Vlcy5jb22CFWNvbGxhYm9yYXRlLmhp
Z2hxLmNvbYIjY29sbGFib3JhdGUubWF1cmljZWJsYWNrYnVybi5jb20uYXWCF2Nv
bGxhYm9yYXRlLm1jbWlsbGFuLmNhgh1jb2xsYWJvcmF0ZS5taW50ZXJlbGxpc29u
LmNvbYIdY29sbGFib3JhdGUubmVsc29ubXVsbGlucy5jb22CFGNvbGxhYm9yYXRl
LnBocmQuY29tghRjb2xsYWJvcmF0ZS52aW5nZS5zZYIfY29sbGFib3JhdGUyLmhp
Z2hxc29sdXRpb25zLmNvbYIiY29sbGFib3JhdGUzdWF0LmhpZ2hxc29sdXRpb25z
LmNvbYIZY29sbGFib3JhdGVhdXMxLmhpZ2hxLmNvbYIZY29sbGFib3JhdGV0ZXN0
LmhpZ2hxLmNvbYIhY29sbGFib3JhdGV1YXQuaGlnaHFzb2x1dGlvbnMuY29tghlj
b25uZWN0LmNvbXBsaWFuY2V3aXNlLm5sghNjb25uZWN0LmRlYnJhdXcuY29tghFj
b25uZWN0LmhvcnRlbi5ka4ITY29ubmVjdC5vbHN3YW5nLmNvbYIOY29ubmVjdC5z
dncubm+CG2Nvbm5lY3QyLmNsaWZmb3JkY2hhbmNlLmNvbYIPY29ycnMuaGlnaHEu
Y29tghBkYXRhcm9vbS5iYWhyLm5vghJkYXRhcm9vbS5vbnhlby5jb22CDmRhdGFy
b29tLndyLm5vgiFkYXRhcm9vbXMuZ29ycmlzc2VuZmVkZXJzcGllbC5jb22CI2Rh
dGFyb29tcy5oZXJiZXJ0c21pdGhmcmVlaGlsbHMuY29tghdkYXRhcm9vbXMubWFj
cXVhcmllLmNvbYIUZGVhbHJvb20uZm9nbGVycy5jb22CFGRlYWxyb29tLm5hYmFy
cm8uY29tghxkZWFscm9vbS5zaW1tb25zLXNpbW1vbnMuY29tgiFkZWFscm9vbXMu
bm9ydG9ucm9zZWZ1bGJyaWdodC5jb22CDWRldi5oaWdocS5jb22CEmRpcmVjdC5k
ZW50b25zLmNvbYIQZXNob3JlLmhpZ2hxLmNvbYITZXVyaGlnaHEuc2lkbGV5LmNv
bYIVZXZlcm5ldC5ldmVyc2hlZHMuY29tghJleHRyYW5ldC5hY2N1cmEuZGuCFmV4
dHJhbmV0LmNlZGVycXVpc3Quc2WCFmV4dHJhbmV0LmRlYmV2b2lzZS5jb22CG2V4
dHJhbmV0LmthbW1lcmFkdm9rYXRlbi5ka4IVZXh0cmFuZXRzLmFzaHVyc3QuY29t
ghNmb3J1bS52YW5kb29ybmUuY29tgg9ncm9vbS5oaWdocS5jb22CGWhpZ2hxLnBh
c2N1YXlhcXVpLW5zbi5nb3aCEGhpZ2hxLnNpZGxleS5jb22CEmhxYTF1YWUxLmhp
Z2hxLmNvbYIRaHFhMXVrMS5oaWdocS5jb22CEWhxYTF1azIuaGlnaHEuY29tghFo
cWExdXMxLmhpZ2hxLmNvbYIRaHFhMXVzMi5oaWdocS5jb22CEmxhdy5mcmFua2xp
bnRuLmdvdoIRbGVnYWwubGF6dXJpdGUuY2+CDWxlZ2FsLnRlbC5jb22CGGxlZ2Fs
LndlbGxzcGFuLmhpZ2hxLmNvbYI6dXMtYXV0aG9yaXRpZXMuaW5mb3JtYXRpb25l
eGNoYW5nZS5tZXJjZWRlcy1iZW56LmhpZ2hxLmNvbYISdmRyLm1hY3JvYmVydHMu
Y29tMA0GCSqGSIb3DQEBCwUAA4IBAQAyq0dJGZ7O7gpG0eV4VfayMmdf7kSEcTbX
7zIG2lVRqVZJ70u2/zQwsGKeh+ktAJ3lSLaMGfix2U4ci9NfwjNuOmq1Hh+hGp7j
9bvIdOwtoB0Jbnr/in8q++wLb7yMaSH7uxQ219iTcW7T8rzxeGs2e/GeIb1STpNz
YDHUzQMCYCTtj56FxODatHUcxqUrRjg++ong3nvvwsN5nv0JnKFtaL+nI2CPWEuD
ZdIOmZ0tBbb1FuF01xcutc9VbJpSsJBAtgvD6DIHoAEX67CYbEhI9sevWSE7VuJQ
qd1iRM/n1WnSFK3Xfr6MQbP2E2Vaw1GdnIT4lu1WH1aYjAojOhIK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArTJP90EcfHnwJ0PklbsB
YmyoDM96W8yvoUeTsCRvQx6TPmJ6Tyh3RIlroaPol5ORWjlXcQZXVX0/KuwsmHnk
+tv6r2miPabAuV7oDd1tNWF7zpKPg79prmCKZ3R5ka08iyepPTQ45xW622THj8SF
FmWtnQjfy6Zo7TReIv9FvEXMHM8GJ4q8bF/2L1lswlDqAx6iUoc7eGJd5gt9lmc5
0KRhOtvGvyKkZ+mGxjgjMiwhazzGJxfDu4GKP8eZtiBhOPhnREUnFBpoK/cyVTkp
Djs4W0AcNRkHR3dqJqkWpdCG3ObjNNoEA2elWB1Rp5E+d99rFVJldahSW2qgBtpy
TH00QvkRq6p3/Gptv/VXOduBykiwGGa5FWiicXOwjimOFPUvplU+OUKO+R4NrbXC
Ie1TKDeHTRr6Vk7Ef6X5M8YkMRR+LQqihU4xTEQKfAx8MPsPlw6YZBonMe7/Q8EQ
XQcxcDPwZBxJ/zUU5oJQZ1jcPJgCAI6TYCo7qOTS/7XaOmRAgDanivw6P1bf5Sj2
q2N0exIDzLeLxHTENe1E3/qY/DAodukGSEcZNVPDLcyHLmGe5kSy+WqE/eGiADZ9
LceQrouxsI/qZZwMarYd+UQbbufTj3Z1fwDhSOq1mdPGxZ/X9MVu+XyzZLUJIrH8
7D6PE34HSnZMocGgZI3l2TMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 226512737400299786587032705804119379773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706580207157135244757418615193876919450896973327411109779264444311554648697457937127086466929778227951168730091543899445762897138270382080358906665877676303315207365058569080942682598897090651524326520577729379235628712416254719019986100265131640788339221977260989106417188751003434736433185035200587682730098004412682229637905725140449263456803283755531688013087273644407857737646653131651658205455807247738263922377050633731435170415048602901985347241334519535684603795310655552899012645820469813889665718458114237067046191097773894331267825972433227456227386600870612055200529309477042259970510197526350090708444654344659052175927406855679615863404330432986373201675521538978066292514535431761220841629550316816713274459863812973482383125426859029186124775847536241515273822465332574177321990655982940037851427013372943772602261878693058540385891815445866290140466049715755382677786185162120014563617492503155588365778425322392912885380299676447423006085657709047605996692761003651351985652812988912623053073334151481336609315381467251561362483195509195337512420352329149847607999064623304920796346465082814886489938677651690246073941582784746182249240248006567432676884796171023321418757930878082156488689392662660823364214839603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e28bb422f20159feffea89e96b641c11a7bef364
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017fb3b496bd0000040300473045022100ceec5ececf5479ce5de00ae1019291a3cfa8a12a64a3e9d7fbc11c046746534b02207f318f440b16db4995a14d6c468e378f20e7e93b1cf4ce59e9db893025c878810076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017fb3b4967700000403004730450220488b94a6b818161f3fac2987b638d6f6b64d58c51250dd9559fdb97b1f1c5d55022100d63ff9eff0800ab720cb5065fb1368af0f966b9724fa878693397db71d227bb7007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017fb3b4965500000403004730450220169c48489b30bf75d36798c70fd5d2c4eb4c031f5993cca328609f484fc422e4022100b6ad37f2c349f4d9dcf37a63a3212cbefe5bf161d9be6c32505ac9ac7e53df30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acccollaborate.acc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aosphere.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claytonutz.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientconnect.drinkerbiddle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.carpmaels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.pelsrijcken.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.wottonkearney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.bellgully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.cgsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.linklaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsite.steptoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsite.twobirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.allens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.bakerdonelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.garrigues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.mauriceblackburn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.mcmillan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.minterellison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.nelsonmullins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.phrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.vinge.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate2.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate3uat.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborateaus1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboratetest.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborateuat.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.compliancewise.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.debrauw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.horten.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.olswang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.svw.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2.cliffordchance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corrs.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.bahr.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.onxeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.wr.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datarooms.gorrissenfederspiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datarooms.herbertsmithfreehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datarooms.macquarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealroom.foglers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealroom.nabarro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealroom.simmons-simmons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealrooms.nortonrosefulbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshore.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurhighq.sidley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evernet.eversheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.accura.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.cederquist.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.debevoise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.kammeradvokaten.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranets.ashurst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.vandoorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groom.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.pascuayaqui-nsn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.sidley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqa1uae1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqa1uk1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqa1uk2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqa1us1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqa1us2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.franklintn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.lazurite.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.tel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.wellspan.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-authorities.informationexchange.mercedes-benz.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.macroberts.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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