cert2-prod.aut.a24365.net

Issued by R3

About this certificate

This digital certificate with serial number 03:bc:b9:ae:69:a8:73:9f:ca:73:c8:a9:f6:df:37:69:2f:4d was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cert2-prod.aut.a24365.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:b9:ae:69:a8:73:9f:ca:73:c8:a9:f6:df:37:69:2f:4d
Serial Number (int): 325556755558289889204691134424064604057421
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:98:b0:2c:60:6e:6b:29:27:52:82:45:2c:60:04:48:11:79:48:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:c8:18:72:27:eb:25:3f:71:67:ae:c3:9b:e4:42:53:11:72:15:57
Fingerprint (sha256): 10:f4:75:0e:9f:77:c4:ae:27:71:e3:39:10:6c:f1:a3:e9:a0:4d:d7:63:eb:dd:f9:59:a6:98:82:6b:1f:e6:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert2-prod.aut.a24365.net

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert2-prod.aut.a24365.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
api.us-east-1.a.rdata.rapid.acxiom.io
api.us-east-1.a.rgraph360.rapid.acxiom.io
aqfer.lijit.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c036.aut-prod.aqfer.net
c045.aut-prod.aqfer.net
c066.aut-prod.aqfer.net
c067.aut-prod.aqfer.net
c900.aut-prod.aqfer.com
c900.aut-prod.aqfer.net
c901.aut-prod.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
comsync.lijit.com
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aut-prod.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
h1.c026.aut-prod.aqfer.net
h1.c054.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
marketing.aut-prod.aqfer.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.breadfinancial.com
rtag.comenity.net
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.nypost-preprod.alley.ws
t.nypost.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.retail.aqfer.com
t1.aiproxies.com
test.c026.aut-prod.aqfer.net

Other certificates including the domain name a24365.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net

Certificate

The complete raw certificate details for cert2-prod.aut.a24365.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJWhLRV3A99UxazawFCx
H/DYONvMPJDA7hrG0qWYyqercdRqZZ14H1G8qFiOedZC7f8qYuGI8xW4G307WiCm
ZFCgr/dWQS8fWJgYbkt4yqHBxbbtw+4T4JTksraq/eynkP2JGmoU3gB/JF68x/QM
TDIszWWjMAFcmrjuUie5uIEx99Uw50wObkeMB5dT6KybfZ7Y8EHWUC65CuQmzcE5
Nt2TPVACjEfen0rXwSupVIhBOqP2m+5tXkmqHsg8R1ZaRURfJ6+QxtjfgjrWnEZU
GIQfBFXMg38Nxcxfnkp9njCsXpfyfHH3WlVVsf6kCvewaACa6JkAi9U3NBSUCwyB
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325556755558289889204691134424064604057421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 15:38:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 15:38:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2-prod.aut.a24365.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22291726776922413611422170459517380247475769986365407681994806867724600895125717780030862491533270169342926070859960408348102006036199785542997561679262441868416780077464676693880460723601552015465327052132055568568027810619731713047264293128813274152321540095737602333383094212876101617013074148920401109132815402619379719497371200745882051828793748235419655615759069915450652724234207906691905377377267761548697992300190806557727724999772852693428884654652788324957698843671051807084469499268054882353221665589615935764143210990721580738676979134359649031602151757903503190538107857838361685527457726090912348275171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f98b02c606e6b29275282452c60044811794891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1455 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.rdata.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.rgraph360.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c045.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c066.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c067.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2-prod.aut.a24365.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsync.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c026.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c054.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.breadfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.comenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.retail.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.c026.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018adca8155c0000040300483046022100dc88a27415424b61b24abb65f87ce82f51cc746f61876613658c6d54f120b504022100d41db79921761328dd6264f2ceb3a74b57bbe2a9826cc577e1341f2a2c27a8b3007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adca815540000040300483046022100a932c414db85cf3554bb7bd62a139214755a29a2967df8061585e64087b1d8cb022100accc930a533e11cb5e6cf0e6a2c66e4440d469173ba8f5807ab4b038ecfd97f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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