content.aimatch.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d6:1f:15:e2:9c:47:9a:d2:72:73:92:ef:a3:99:7b:47:67 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content.aimatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:1f:15:e2:9c:47:9a:d2:72:73:92:ef:a3:99:7b:47:67
Serial Number (int): 421310889950431503772682487998439940114279
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:bd:fb:91:0a:fb:98:5b:70:be:24:f5:72:09:54:49:26:22:16:39
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:d3:7a:94:97:c7:c2:93:10:4c:26:7b:d4:bc:0e:60:b1:25:a4:ec
Fingerprint (sha256): 12:ba:2f:81:7b:97:7a:df:f0:16:e9:ca:27:cf:32:8d:46:78:73:1f:72:a0:6e:cc:9d:64:c7:1b:c8:d3:9b:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate content.aimatch.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content.aimatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canary-content.360match.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.pl
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.pl
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicc1ust.cxtrvl.com
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360-test.vodafone.com.au
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.csob.sk
content-ci360.digitalalchemy.net.au
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.infosquaregroup.com
content-ci360.jyskebank.dk
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.ruv.de
content-ci360.stoloto.ru
content-ci360.telia.ee
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.vodafone.com.au
content-ci360.wcm2-jyskebank-dk-s.bdunet.dk
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.24.hu
content.aimatch.com
content.dna360.scholastic.com
content.kbinfo.cz
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
test-akamai.aimatch.com
usincm-content.mktg.sas.com

Other certificates including the domain name aimatch.com

(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com

Certificate

The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rQriOufzJarcW5tKF1c
U9qdRKBgYzhiMQtLUKHMlGD9AywQNRSBIZ65TACb3rfWtoh2ipeWnyF+mXM4oTik
axFCl53bzLxV/nX/JHYSgVz7qIgmC6o7jEn4ePCgSDhzPl+4Nuo8ZVCg7zntixb8
pBF9MVzlp1o6xctTuQP6E6pZdJYuJHz42nQCczkC4UGmPXDB4ypZ2z1CGult8ucM
fhNrmUrJakQUrISwqzVbCWaiRfaHevvIsLQUBWv4Lpv8I9tIvyVOC7SzPpsaCQ6r
5y4qy/s9wcWg5fSmAvp/WzHFec7PW6dekOYM8c8945f3/S/M1BkVbYdasDmeZsr7
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421310889950431503772682487998439940114279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-19 15:07:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 15:07:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29628608528957111654047233235764145169615198795599242234251922663294601702477531114407613738708205214797302927999017436439802247662780127317583542917841490815461868224119703706448112377881666775587010334641644682218035854060360702657974551661939444136835262569831539524048975042051071406106479851610468632748532984772413614789282625304820988850827583587367295438644130190379089692679264662286463245307323864229276347631439149195635240639015028869196665489845340503588950791979294045481574708781405394388119049951839295190440149962478313032181254338348331353696308942434312769974750201078458822377845991313251924376549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6bdfb910afb985b70be24f57209544926221639
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-content.360match.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicntn.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc1ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-test.vodafone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.csob.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.digitalalchemy.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.idaten.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.infosquaregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.jyskebank.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.paulfredrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.ruv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.stoloto.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.telia.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.vodafone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.wcm2-jyskebank-dk-s.bdunet.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.24.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dna360.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.kbinfo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.odt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscontent.morningstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticcontent.mycwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-akamai.aimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-content.mktg.sas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017b5f2acf5a00000403004630440220595e46fd4c6380f188fb8d1e5b5523b2c52bbdde082f950dd8575b7777f031c8022049df4ab81d6a1b468934c1db976db7b8263e75c000f195985d5940d38966455a0077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017b5f2acf2e0000040300483046022100f3380b49c376bfc22b0d09b5bc4d0fd40208286c62f70ff74b889331ac2fb77b022100896d71012afbf9b17b5dd9104486b8a3555fdca8f0e37c09f81c384c4e268bfc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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