dukane.foremostmedia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:eb:ef:14:16:b6:e7:62:7f:52:2c:00:ee:15:2d:8a:bc:51 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dukane.foremostmedia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:eb:ef:14:16:b6:e7:62:7f:52:2c:00:ee:15:2d:8a:bc:51
Serial Number (int): 341621003819335191415129570599197695720529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:f0:4f:dc:33:f1:93:60:1b:d5:04:43:6c:06:71:e9:bf:43:5d:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:7e:05:8f:d7:09:b6:fd:2c:e7:16:48:65:4a:d6:b0:6e:ba:ef:6d
Fingerprint (sha256): 0b:33:76:ee:55:03:8f:50:de:e7:46:97:97:34:02:a0:c0:45:5f:81:31:7e:ef:45:85:1f:e6:a5:bf:40:ba:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dukane.foremostmedia.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dukane.foremostmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.ovaledge.com
aspectpolo.polo-development.com
beaufort.polo-development.com
binfieldheathpoloclub.polo-development.com
blackbears.polo-development.com
brandywinepolo.polo-development.com
cirencester.polo-development.com
connectstage.wintellplus.com
cotswold.polo-development.com
cptest.californiapsychics.com
demo.jillianstreit.com
demo.malcomonline.com
drafting.trubytraining.com
dubaipoloclub.polo-development.com
dukane.foremostmedia.com
edu.hatalom.com
emsworth.polo-development.com
entertech-learn.inco-group.co
ghantootpolo.polo-development.com
giet-learn.inco-group.co
git-learn.inco-group.co
grandcounty.academyfortourism.com
greendigitalskills-learn.inco-group.co
hampoloclub.polo-development.com
hertfordshire.polo-development.com
houseboats.trubytraining.com
ia-international-learn.inco-group.co
iafrance-learn.inco-group.co
imu.tridot.com
inghubs-learn.inco-group.co
ipapolo.polo-development.com
jazzpharma.malcomonline.com
laesperanza.polo-development.com
learn.clubprophet.com
learn.inco-group.co
learn.onboardmaritime.com
learning.predictap.com
learning.servicecore.com
learning.yourdocket.com
learninglab.rizeconsultants.com
llu.llac.org
lms.xcelocloud.com
login.fightconnectapp.com
master.malcomonline.com
memogracida.polo-development.com
mysports.polo-development.com
novartis.malcomonline.com
pathways-learn.inco-group.co
pdh.suiteintro.com
pinnacle.tonyrobbins.com
puestoviejo.polo-development.com
reports.tfgeducation.com
rlu.revmlc.com
silverthorn.trubytraining.com
socialtides-learn.inco-group.co
summerhill.polo-development.com
tennesseelms.stchealth.us
testuniversity.gridgain.com
thrive.tonyrobbins.com
training.jeolusa.com
visitphilly.academyfortourism.com
www.americanvaluescenter.org
www.bankingedhub.com
www.bbmanestream.co.it
www.bbmanestream.co.nl
www.bbmanestream.co.no
www.bbmanestream.co.uk
www.bbmanestream.com.gr
www.bbmanestream.com.pl
www.bbmanestream.eu
www.bbmanestream.fr
www.ipapolo.com
www.knowledge.homes
www.malcomonline.com
www.neuro-onc-academy.org

Other certificates including the domain name foremostmedia.com

(limited to 100 certificates)
wadetrim.trubytraining.com
lazarus.foremostmedia.com
wadetrim.trubytraining.com
36.foremostmedia.com
academy.boulderinsight.com
internal.hedgucation.assurehedge.com
foremostmedia.com
foremostmedia.com
36.foremostmedia.com
dukane.foremostmedia.com
training.foremostmedia.com
go.foremostmedia.com
invalid.foremostmedia.com
74.foremostmedia.com
training.foremostmedia.com
university.foremostmedia.com
dns1.foremostmedia.com
lazarus.foremostmedia.com
crm.foremostmedia.com
foremostmedia.com
serpentine.polo-development.com
77.foremostmedia.com
invalid.foremostmedia.com
training.foremostmedia.com
*.foremostmedia.com
crm.foremostmedia.com
dukane.foremostmedia.com
dukane.foremostmedia.com
training.foremostmedia.com
training.foremostmedia.com
polobern.polo-development.com
74.foremostmedia.com
designs.foremostmedia.com
elearning.toyota.com.ph
training.foremostmedia.com
academy.boulderinsight.com
dns1.foremostmedia.com
learning.travelalberta.com
foremostmedia.com
73.foremostmedia.com
77.foremostmedia.com
77.foremostmedia.com
training.foremostmedia.com
internal.hedgucation.assurehedge.com
ucdavis.boulderinsight.com
labs.foremostmedia.com
www.pts.org
foremostmedia.com
litifam-training.litify.com
foremostmedia.com
academy.evgo.com
36.foremostmedia.com
36.foremostmedia.com
77.foremostmedia.com
go.foremostmedia.com
crm.foremostmedia.com
74.foremostmedia.com
foremostmedia.com
elearning.toyota.com.ph
dnn2.foremostmedia.com
158.foremostmedia.com
36.foremostmedia.com
31.foremostmedia.com
130.foremostmedia.com
go.foremostmedia.com
*.foremostmedia.com
fmcrm.foremostmedia.com
go.foremostmedia.com
fairchild.trubytraining.com
fmcrm.foremostmedia.com
foremostmedia.com
www.wearespinco.ca
training.foremostmedia.com
internal.hedgucation.assurehedge.com
elearning.toyota.com.ph
130.foremostmedia.com
designs.foremostmedia.com
university.foremostmedia.com
foremostmedia.com
foremostmedia.com
foremostmedia.com
chemtronics.foremostmedia.com
130.foremostmedia.com
wadetrim.trubytraining.com
internal.hedgucation.assurehedge.com
130.foremostmedia.com
130.foremostmedia.com
internal.hedgucation.assurehedge.com
foremostmedia.com
internal.hedgucation.assurehedge.com
foremostmedia.com
77.foremostmedia.com
foremostmedia.com
academy.boulderinsight.com
wadetrim.trubytraining.com
130.foremostmedia.com
foremostmedia.com
foremostmedia.com
go.foremostmedia.com
wadetrim.trubytraining.com

Certificate

The complete raw certificate details for dukane.foremostmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wlXeWOAzY2R/vLIKHlF
cpVb/Q5J1ybNcy5lI1Y+XloUW6Q7W7ezZFeCcEiczbLlgH5y1kk/o6X1wuw7epRr
NVj6aex7gzbz5vsp5J9DiDkPTkROa9F1zOuvay+DWQvCknC72gaFHdAKSndDpZKu
UN0sd3oL7tEr64n1XsFixe0mszgxZQV6MJd4x6A0C2BTXFi9KBhP3Zu093xWvpKE
xeDcgvW6iqTcAAt5vday298F1YoU5Gli9CCqXgIW0EOfY1a8EXryXPhDbXewXAos
P1A5p53OIascmDe6o5hpPmjA8oZddrEhdBINNEh5Ux2BBn5HKsO747W2UpSfT2Yh
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341621003819335191415129570599197695720529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 09:41:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 09:41:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dukane.foremostmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30175561448871729049459209116255016000668723599678925066310751227857629514564433586341097377270145302396892604847987686588249287980948316146348690370145434582976385868098191169098207305080558432797926774986757221965470503757876850870996844494907011418534905677861593224423936102367130513777717271003203728286147168944966582840244176283412739225186828839814644070110647136094914472210841498789288564340617897341663115106375320712204182062424272400170072555399419877938983361622230156575977249058521286754515893714023596043048990068309749805189826863187637624334585070418942199792163888068901224109272352114317837345123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b6f04fdc33f193601bd504436c0671e9bf435dda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2083 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.ovaledge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspectpolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaufort.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binfieldheathpoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackbears.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinepolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirencester.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstage.wintellplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotswold.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cptest.californiapsychics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.jillianstreit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drafting.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubaipoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukane.foremostmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.hatalom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emsworth.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entertech-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghantootpolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giet-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandcounty.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greendigitalskills-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampoloclub.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertfordshire.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseboats.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia-international-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iafrance-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imu.tridot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inghubs-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipapolo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzpharma.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laesperanza.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.clubprophet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.onboardmaritime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.predictap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.servicecore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.yourdocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learninglab.rizeconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llu.llac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.xcelocloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.fightconnectapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memogracida.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysports.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novartis.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathways-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdh.suiteintro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnacle.tonyrobbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puestoviejo.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.tfgeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlu.revmlc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverthorn.trubytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialtides-learn.inco-group.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhill.polo-development.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennesseelms.stchealth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testuniversity.gridgain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thrive.tonyrobbins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.jeolusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitphilly.academyfortourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanvaluescenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankingedhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.co.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.co.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.co.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.com.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbmanestream.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipapolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledge.homes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malcomonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neuro-onc-academy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1f257d0f0000040300473045022032369572393bf9df1bae37c298c5e5deeaddd2043ee1df19136ecdf7ea20871a022100d989575be07604914e20ec691d5b1d9264f3e6ccc7cf066e5e8e8330b9323e54007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f1f257dd6000004030047304502202cd3e9b84cb6c233275633e9da7c361d1ade86cc157bd300b4e89b7f47ad21590221009980734ed0b0b1fdacccee022f15673b0b7a78fc744add1517cb0b48355dab20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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