www.highq.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 43:0f:aa:56:dd:00:7d:c8:af:30:6d:98:21:4e:26:4a was issued on by Sectigo Limited.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.highq.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 43:0f:aa:56:dd:00:7d:c8:af:30:6d:98:21:4e:26:4a
Serial Number (int): 89139615062118764077988278452639114826
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 01:3b:53:c7:1f:b2:b6:07:95:6a:1d:67:e6:75:bc:83:51:c0:90:18
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 1a:7e:3a:f4:5f:67:ea:35:66:46:fc:1b:01:b6:2b:5f:58:b3:48:dc
Fingerprint (sha256): 10:b7:53:23:ef:16:0e:f4:79:36:dc:bd:b5:c6:a7:6c:77:34:4a:30:a1:f8:3a:07:bb:f1:0c:4b:54:96:d7:11

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.highq.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.highq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.highq.com
1800flowersinc.highq.com
allenmatkins.highq.com
at.haavind.no
ats.highq.com
axioma.highq.com
bastion.macfarlanes.com
beneschlaw.highqsolutions.com
blakes.highq.com
businessportal.andersen-partners.dk
cccapital.highq.com
clientportal.fieldfisher.com
clientspace.cleggssolicitors.com
collaborate.biosev.com
collaborate.burr.com
collaborate.cms-fl.com
collaborate.elvingerhoss.lu
collaborate.ngelaw.com
collaborate.penningtons.co.uk
collaborate.wottonkearney.com
collaborate1can1.highq.com
collaborate1can2.highq.com
contentexperience.highq.com
contractexpress.highq.com
cooleyp4.highq.com
cp.highq.com
dataroom.stephens-scown.co.uk
demop4.highq.com
direct2.dentons.com
direct3.dentons.com
direct4.dentons.com
dynamic.gowlingwlg.com
eu.collaborate.hoganlovells.com
eversheds-sutherlanduat.highq.com
extranet.cms-hs.com
extranet.s-s.mx
extranets.bassberry.com
fasken.highq.com
freedomfinancial.highq.com
highqdemo1.highq.com
highqdemo2.highq.com
highqdemo3.highq.com
highqdemo4.highq.com
highqdemo5.highq.com
highqdemo6.highq.com
highqdemo7.highq.com
hive.thras.io
hub.flintgrp.com
ilta.highq.com
integrationbeta.highq.com
knowledge.highq.com
legal.goodfoodholdings.com
legalconnect.highq.com
leviton.highq.com
members.lpc.org.uk
ms.highq.com
mtinnovate.mccarthy.ca
online.austoncorp.com.au
online.campaignlegalcenter.org
opflegal.op-f.org
osler.highq.com
pacificlife.highq.com
prototype1.highq.com
publisher.dentons.com
search-acumen.highq.com
secloreuat.highq.com
securecollaboration.macquarie.com
securitytest2.highq.com
seeunity.highq.com
seeunitylive.highq.com
sente.highq.com
share.proskauer.com
share4.whitecase.com
supportreporting.highq.com
terralex.highq.com
traffickingresearch.wearelumos.org
trpartnership.highq.com
uat.highqhub.com
uatcollaborate.allens.com.au
us.collaborate.hoganlovells.com
vault.life-safe.com
workflowuat.highq.com
www.bmgs.aocollaborate.com
www.jacmac.com.au
www.mydittmar.fi

Other certificates including the domain name highq.com

(limited to 100 certificates)
cwp.status.symantec.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
andrei.sterda.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ccd.status.symantec.com

www.highq.com
cc3.status.jasper.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
www.highq.com
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
thomsonreuters.com
api-status.360cities.net
www.highq.com
www.highq.com
cc3.status.jasper.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

*.hqdev.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
offers.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
highq.com
offers.highq.com
cwp.status.symantec.com
www.highq.com
www.highq.com
www.highq.com
eboks-status.reepay.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
www.highq.com
support2.cdnetworks.net
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.highq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S5RDaB4BzN1xsKVNrBq
CvARkeZ4epHE6Q2od5aX45m9FiQoQNMxt1sbD5zGdkTs8+3XnUfzihW7Zrtt4XZt
I4b83QcV8QhK12UTWXqXdiT7F2UnaxJEbqjuEQi+GH/GkILvytx9neu3VrDsHXx/
+dmySJKPB5UaWtq3k7ep8HRHNDBeirslC/Pq3zzrrBB1Z3AnAWtdADxNPHKyHt0R
10Yyh+nGQMv2sPiOnKJRtRk9OM2stKKG/iZRRl7x2oOycqD/kbqmuVoF94btRegV
HwxCDl878rkX/GdmaVrMmJznoCEZMbCqUi7g4ZB3dn5mNjBXUJD+relDN27+ciJ2
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89139615062118764077988278452639114826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28426458191057397869398100669641490963657318480477137748569156375055572685811232546864283222089264319116529872209653159250449473202006706377354619789223071067231701586901650437281921450625230539699639322693035766557662991939236711759073861075831169567648824702892922350231146581333128023403957338428689434826514044008532249440652861104102514600578891726231569181413896433757627066814094499038470632896127973702047466891356881251252938889158052509676210627736711862461160875540761005227473129495573105403548696128361687848433290677646649989519579353373390888038624016945730645956698332432074537712274278286858240816689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							013b53c71fb2b607956a1d67e675bc8351c09018
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800flowersinc.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenmatkins.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.haavind.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ats.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axioma.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bastion.macfarlanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneschlaw.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blakes.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessportal.andersen-partners.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccapital.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.fieldfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientspace.cleggssolicitors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.biosev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.burr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.cms-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.elvingerhoss.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.ngelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.penningtons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.wottonkearney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate1can1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate1can2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentexperience.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractexpress.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooleyp4.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.stephens-scown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demop4.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct2.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct3.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct4.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.gowlingwlg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.collaborate.hoganlovells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eversheds-sutherlanduat.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.cms-hs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.s-s.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranets.bassberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasken.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomfinancial.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo3.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo4.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo5.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo6.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo7.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.thras.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.flintgrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilta.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrationbeta.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.goodfoodholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalconnect.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leviton.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.lpc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtinnovate.mccarthy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.austoncorp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.campaignlegalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opflegal.op-f.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osler.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificlife.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publisher.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-acumen.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secloreuat.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securecollaboration.macquarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitytest2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeunity.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeunitylive.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sente.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.proskauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share4.whitecase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportreporting.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terralex.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffickingresearch.wearelumos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trpartnership.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.highqhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcollaborate.allens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.collaborate.hoganlovells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault.life-safe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowuat.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmgs.aocollaborate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacmac.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydittmar.fi'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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