acquia-sites.com

- Acquia Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:3c:6e:d9:14:74:a7:3b:7d:15:70:0e:00:d0:b6:a5 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:3c:6e:d9:14:74:a7:3b:7d:15:70:0e:00:d0:b6:a5
Serial Number (int): 6959926054335061625414728450906830501
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 80:86:51:29:25:26:fc:a0:e8:ab:8b:5d:05:0b:51:32:b8:72:68:c7
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): f4:70:d4:90:b3:73:7e:18:eb:09:88:2d:44:88:14:d9:54:50:03:41
Fingerprint (sha256): 12:09:de:09:66:df:58:01:a2:1f:96:7f:88:47:fc:eb:47:79:72:49:32:43:ab:1b:87:e5:b0:b7:2b:30:84:fd

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate acquia-sites.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquia-sites.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
www.emmis.acsitefactory.com
www.heartland.acsitefactory.com
www.sabmiller.acsitefactory.com
www.umn.acsitefactory.com
www.peacecorps.acsitefactory.com
www.hms.acsitefactory.com
www.appnovation.acsitefactory.com
www.veolia.acsitefactory.com
www.veolia.cn
www.veolia.co.uk
www.veolia.com
www.veolia.cz
www.veolia.de
www.veolia.fr
www.veolianorthamerica.com
livingcircular.veolia.com
www.cityofla.acsitefactory.com
www.veolia.com.mx
www.veolia.pl
www.c.acsitefactory.com
www.ideaden.acsitefactory.com
www.nasdaqpoc.acsitefactory.com
www.box.acsitefactory.com
www.presales.acsitefactory.com
veolia.fr
veolia.cn
veolia.cz
veolia.de
veolia.com.mx
veolia.com.pe
veolia.in
veolia.com.co
veolia.ie
veolia.sk
veolia.co
veolia.cl
www.entercom.acsitefactory.com
www.demo.acquia-cc.com
www.cfn.acsitefactory.com
www.unileverpov.acsitefactory.com
www.nas.acsitefactory.com
www.accuchek.acsitefactory.com
www.tulane.acsitefactory.com
www.dev-wmgpaas.acsitefactory.com
www.test-wmgpaas.acsitefactory.com
www.wmgpaas.acsitefactory.com
www.dev-asf.acsitefactory.com
www.test-asf.acsitefactory.com
www.asf.acsitefactory.com
www.omes.acsitefactory.com
www.dev-omes.acsitefactory.com
www.test-omes.acsitefactory.com
www.masterchannel.acsitefactory.com
www.dev-masterchannel.acsitefactory.com
www.test-masterchannel.acsitefactory.com
www.novartis.acsitefactory.com
www.test-novartis.acsitefactory.com
www.dev-novartis.acsitefactory.com
www.dev-accuchek.acsitefactory.com
www.test-accuchek.acsitefactory.com
www.dev-riceedu.acsitefactory.com
www.test-riceedu.acsitefactory.com
www.riceedu.acsitefactory.com
www.dev-entercom.acsitefactory.com
www.test-entercom.acsitefactory.com
www.test-sabmiller.acsitefactory.com
www.dev-sabmiller.acsitefactory.com
www.test-nas.acsitefactory.com
www.dev-nas.acsitefactory.com
www.test-cfn.acsitefactory.com
www.dev-cfn.acsitefactory.com
www.syngenta.acsitefactory.com
www.test-syngenta.acsitefactory.com
www.dev-syngenta.acsitefactory.com
www.dev-lvpov.acsitefactory.com
www.test-lvpov.acsitefactory.com
www.lvpov.acsitefactory.com
www.demo.acsitefactory.com
www.test-demo.acsitefactory.com
www.dev-demo.acsitefactory.com
www.test2-cfn.acsitefactory.com
www.training.acsitefactory.com
www.test-training.acsitefactory.com
www.dev-training.acsitefactory.com
www.nestleinfant.acsitefactory.com
www.test-nestleinfant.acsitefactory.com
www.dev-nestleinfant.acsitefactory.com
www.dev-nysits.acsitefactory.com
www.test-nysits.acsitefactory.com
www.nysits.acsitefactory.com
ghsm.test-hms.acsitefactory.com

Other certificates including the domain name acquia-sites.com

(limited to 100 certificates)
acquia-sites.com
acquia-sites.com
acquia-sites.com
datamedicaid.prod.acquia-sites.com
acquia-sites.com
staging.ensco.com
www-stage.anzacmemorial.nsw.gov.au
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
achievesdtcgjdnbrbp.devcloud.acquia-sites.com
mbrdev.prod.acquia-sites.com
www.stg.solocal.com
tplwebsitestg.prod.acquia-sites.com
raritanvalstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
batterseadev.prod.acquia-sites.com
aupairworld.prod.acquia-sites.com
www.dev.solocal.com
www.stg.solocal.com
premiereprep.com
acquia-sites.com
ee.dustindev.com
cloudapi.enterprise-g1.acquia-sites.com
batterseadev.prod.acquia-sites.com
stewardcommunity.prod.acquia-sites.com
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
planetpaymentprod.prod.acquia-sites.com
trocairestg.prod.acquia-sites.com
tsysitesdev.prod.acquia-sites.com
tplwebsitestg.prod.acquia-sites.com
acquia-sites.com
milgardstg.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
rrd8multidev.prod.acquia-sites.com
pnwdsstg.prod.acquia-sites.com
www.dev.solocal.com
acquia-sites.com
useastucc5.acquia.com
www.anzacmemorial.nsw.gov.au
tplwebsite.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.enterprise-g1.acquia-sites.com
newhousedev.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.devcloud.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
firstnamesgrouptest.devcloud.acquia-sites.com
acquia-sites.com
jfkldev.prod.acquia-sites.com
acquia-sites.com
cloudapi.trex-prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
useastucc5.acquia.com
quickanddirtytipsdev.prod.acquia-sites.com
acquia-sites.com
stewardcommunity.prod.acquia-sites.com
acquia-sites.com
oitcomms.prod.acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
acquia-sites.com
*.prod.acquia-sites.com
univadisstg.prod.acquia-sites.com
useastucc5.acquia.com
datacms.prod.acquia-sites.com
acquia-sites.com
tplwebsitedev.prod.acquia-sites.com
bmistg.prod.acquia-sites.com

Certificate

The complete raw certificate details for acquia-sites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSVpHBfGR/ENHwYVSONC
ummHP5V3e+lJ9lz3vPWTbQ2UeF07zxJaQYqkhB4swcOVbgTOEJAf4uuvop6dRziw
4h8KyJnmFmqTUePz1swNsOlrL4mgXUxWtW/MQ0zjZ0RQAbRYmI/NV48jcYuawblP
oOacKBba/UAb59LKZ938eotzszTyUaP6uCEdhIm1H1NTk/od1IqSEvG7x7i4+Baq
vKo1tgyWJK+4JWJWrX6de4uveI2FY0k/jF9pX6l5mQxKHhYN7t1EtB3s54SWd16z
+ZAWde4sbN8VzmDrSQCN5USFQjo8ZOxfs6FyGnhb0Z+V2h42DMwZb1W48QP+5ifC
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6959926054335061625414728450906830501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22362627825973731381920051531266813869153557586887125328937144497760851467335172951856181536492429949880703814574013803629270055799793780578242095110639034090733710429632631510962087126613026445575967665362341959500034909064380364713034541043630146643651978268480269875512564175884344098168958351758055520062371555483512766361325176324188999435266398643679354870843582292366454599146106619551771030692805001717833012983870868036065906158249830890459846737176927007941175612134477478650839405884930863406437849617451609073001763212156206253064974684093720309563467619987107959702367616369197615178901823867066635502281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							808651292526fca0e8ab8b5d050b5132b87268c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emmis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartland.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sabmiller.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peacecorps.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hms.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appnovation.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolianorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingcircular.veolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofla.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veolia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideaden.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nasdaqpoc.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.box.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presales.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veolia.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.entercom.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.acquia-cc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unileverpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accuchek.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tulane.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-wmgpaas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-wmgpaas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmgpaas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-asf.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-asf.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asf.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omes.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-omes.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-omes.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterchannel.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-masterchannel.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-masterchannel.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novartis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-novartis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-novartis.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-accuchek.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-accuchek.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-riceedu.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-riceedu.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riceedu.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-entercom.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-entercom.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-sabmiller.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-sabmiller.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-nas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-nas.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.syngenta.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-syngenta.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-syngenta.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-lvpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-lvpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvpov.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-demo.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-demo.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test2-cfn.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-training.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-training.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nestleinfant.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-nestleinfant.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-nestleinfant.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev-nysits.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-nysits.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nysits.acsitefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghsm.test-hms.acsitefactory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ad743ffd104c057094dc2599adc07d533de0e0d904b69a2c6522dbda4b6710ecfc4a3ab0b89d333d47e3c2948032321403b12524fa17fa4a17e095fb32370da03d61807ce7eece2eeca4f6c0cc1bdc447fcce9aff23f6c45c920a3b51625a435260d91c19fcaa342531298bfeeb412d3e7eb6374b335a5b382554711a032938da997f11ff37af8469e3aea76cbecf797c54cadba87ccba5d9302a8b95d87426b1c73bd4a4d78378030be30a7ee7fc362c7a2d66818b9cc2e433236449b2eb9b995c7218f3c6d111aa50122f0c2dc27550009f6acd3e9128f1b5a6fb110b045bab8cff6e9c8d94b48262833afe57a25a62bc4a18881945876db80e5452acd54b