sansites5.jll.com

- Jones Lang LaSalle IP, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:62:e0:48:8a:2f:05:5a:9c:8d:2e:b1:3a:5f:da:07 was issued on by DigiCert Inc.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Jones Lang LaSalle IP, Inc.

Organization: Jones Lang LaSalle IP, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:62:e0:48:8a:2f:05:5a:9c:8d:2e:b1:3a:5f:da:07
Serial Number (int): 20451814035854846354547977481594329607
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ea:11:f3:7b:53:2f:95:fd:84:90:11:8f:95:91:cf:8c:c6:5d:a4:4a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ae:bc:46:0a:0c:90:d6:7a:48:00:b9:b0:9a:9a:11:19:ee:28:ea:95
Fingerprint (sha256): 13:c2:e1:8b:d5:1e:b9:ce:59:51:11:7f:ed:f0:5e:30:8d:7a:a2:fe:b8:c2:94:34:30:cd:60:c1:52:58:a4:99

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate sansites5.jll.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sansites5.jll.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sansites5.jll.com
ae.officefinder.app
api-ca.envio.systems
api-hyperloop-can.envio.systems
api-hyperloop-us.envio.systems
api-hyperloop.envio.systems
api-prod-canada.envio.systems
api-prod-frankfurt.envio.systems
api-prod-virginia.envio.systems
api-sandbox.envio.systems
cbm-ca.envio.systems
cbm-sandbox.envio.systems
cbm-us.envio.systems
cbm.envio.systems
ch.officefinder.app
dev-grafana.trepbi.com
eg.officefinder.app
envio-backstage-api-zipline-ca.envio.systems
envio-backstage-api-zipline-us.envio.systems
envio-backstage-api-zipline.envio.systems
gearbox-sol-sandbox.production-frankfurt03-cluster.envio.systems
hyperloop-can.envio.systems
hyperloop-us.envio.systems
hyperloop.envio.systems
it.officefinder.app
jllstore.com
prod-canada.envio.systems
prod-frankfurt.envio.systems
prod-virginia.envio.systems
sa.officefinder.app
sandbox.envio.systems
solr-eks-solrcloud.trepbi.com
za.officefinder.app

Other certificates including the domain name jll.com

(limited to 100 certificates)
*.ap.jll.com
access.jll.com
www.jllproperty.com
compensationplanning.jll.com
ambitions.jll.com
sansites.jll.com
*.ap.jll.com
investor.jll.com
oneeightyst-dev.jll.com
Projectsapp.jll.com
bpm.jll.com
flexspace.jll.com
proposals.jll.com
immobilier.jll.fr
1441blake.proposals.jll.com
lyncweb-ext-01.am.jll.com
nxtinvest.eu.jll.com
perspectives.jll.com
lyncweb-ext-01.am.jll.com
www.joneslanglasalle.com
tourpointapp.jll.com
ontariosystems.proposals.jll.com
cds2.cvent.com
help.celerity-uk.com
inbom01tsbp002.ap.jll.com
cds2.cvent.com
hybridworks-qa.jll.com
www.joneslanglasalle.com
fr-nxt.eu.jll.com
capitalmarkets.jll.com
charlotteofficemove.resource.jll.com
dev-bpm.jll.com
*.jll.com
fsus-14.freshservice.com
forum.jllcab.live.jll.com
capitalmarkets.jll.com
webmail.am.joneslanglasalle.com
ask.jll.com
propertytemplate.proposals.jll.com
MapIT.EU.JLL.COM
immobilier.jll.lu
cds2.cvent.com
jllapple.live.jll.com
www.arpm.conference.jll.com
lilexpc02.am.jll.com
*.ap.jll.com
fsus-14.freshservice.com
www.thefoundry.proposals.jll.com
globalsustainability.conference.jll.com
cds2.cvent.com
webmail.am.joneslanglasalle.com
hiddengem.conference.jll.com
rmr.proposals.jll.com
shelbournecleveland.proposals.jll.com
www.joneslanglasalle.com
red-preprod.jll.com
authn.jll.com
brandhub.jll.com
*.ap.jll.com
8995airportroad.resource.jll.com
jll-sbx-okta.jll.com
jvdriver.resource.jll.com
tours.prd.propertycapsule.com
clientview-dev.jll.com
my-world.eu.jll.com
www.openavm.com
oneeightyst-dev.jll.com
bpm.jll.com
extapps.jll.com
slotdemo.proposals.jll.com
ambitions.jll.com
hiddengem.conference.jll.com
fed.jll.com
dev-bpm.jll.com
azdeptestprod.jll.com
*.ap.jll.com
lyncpool01.am.jll.com
jll.com.sg
nxtretail.eu.jll.com
authn.jll.com
fsus-14.freshservice.com
red-preprod.jll.com
nxtretail.eu.jll.com
webmail.eu.joneslanglasalle.com
fed.jll.com
*.ap.jll.com
immobilier.jll.fr
vdcexpe01.am.jll.com
capitalmarket-dev.jll.com
www.jllproperty.com
owamail.am.jll.com
clientview-dev.jll.com
sansites5.jll.com
sts.am.jll.com
multifamilyeastcoast.conference.jll.com
www.openavm.com
fsus-14.freshservice.com
jll.com.sg
medline.proposals.jll.com
commuter.eu.jll.com

Certificate

The complete raw certificate details for sansites5.jll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJkjCCCHqgAwIBAgIQD2LgSIovBVqcjS6xOl/aBzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDAyMTUwMDAwMDBa
Fw0yNDExMTMyMzU5NTlaMHQxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhJbGxpbm9p
czEQMA4GA1UEBxMHQ2hpY2FnbzEkMCIGA1UEChMbSm9uZXMgTGFuZyBMYVNhbGxl
IElQLCBJbmMuMRowGAYDVQQDExFzYW5zaXRlczUuamxsLmNvbTBZMBMGByqGSM49
AgEGCCqGSM49AwEHA0IABLwx4/csefzqmAxSN3ewOixMkAyQzNFpA+zezPt49ZoR
Z1uo7dF7mSu2xOd3LvO3WrVNuydUDZUquvp7XbbM2TijggcOMIIHCjAfBgNVHSME
GDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQU6hHze1Mvlf2EkBGP
lZHPjMZdpEowggO2BgNVHREEggOtMIIDqYIRc2Fuc2l0ZXM1LmpsbC5jb22CE2Fl
Lm9mZmljZWZpbmRlci5hcHCCFGFwaS1jYS5lbnZpby5zeXN0ZW1zgh9hcGktaHlw
ZXJsb29wLWNhbi5lbnZpby5zeXN0ZW1zgh5hcGktaHlwZXJsb29wLXVzLmVudmlv
LnN5c3RlbXOCG2FwaS1oeXBlcmxvb3AuZW52aW8uc3lzdGVtc4IdYXBpLXByb2Qt
Y2FuYWRhLmVudmlvLnN5c3RlbXOCIGFwaS1wcm9kLWZyYW5rZnVydC5lbnZpby5z
eXN0ZW1zgh9hcGktcHJvZC12aXJnaW5pYS5lbnZpby5zeXN0ZW1zghlhcGktc2Fu
ZGJveC5lbnZpby5zeXN0ZW1zghRjYm0tY2EuZW52aW8uc3lzdGVtc4IZY2JtLXNh
bmRib3guZW52aW8uc3lzdGVtc4IUY2JtLXVzLmVudmlvLnN5c3RlbXOCEWNibS5l
bnZpby5zeXN0ZW1zghNjaC5vZmZpY2VmaW5kZXIuYXBwghZkZXYtZ3JhZmFuYS50
cmVwYmkuY29tghNlZy5vZmZpY2VmaW5kZXIuYXBwgixlbnZpby1iYWNrc3RhZ2Ut
YXBpLXppcGxpbmUtY2EuZW52aW8uc3lzdGVtc4IsZW52aW8tYmFja3N0YWdlLWFw
aS16aXBsaW5lLXVzLmVudmlvLnN5c3RlbXOCKWVudmlvLWJhY2tzdGFnZS1hcGkt
emlwbGluZS5lbnZpby5zeXN0ZW1zgkBnZWFyYm94LXNvbC1zYW5kYm94LnByb2R1
Y3Rpb24tZnJhbmtmdXJ0MDMtY2x1c3Rlci5lbnZpby5zeXN0ZW1zghtoeXBlcmxv
b3AtY2FuLmVudmlvLnN5c3RlbXOCGmh5cGVybG9vcC11cy5lbnZpby5zeXN0ZW1z
ghdoeXBlcmxvb3AuZW52aW8uc3lzdGVtc4ITaXQub2ZmaWNlZmluZGVyLmFwcIIM
amxsc3RvcmUuY29tghlwcm9kLWNhbmFkYS5lbnZpby5zeXN0ZW1zghxwcm9kLWZy
YW5rZnVydC5lbnZpby5zeXN0ZW1zghtwcm9kLXZpcmdpbmlhLmVudmlvLnN5c3Rl
bXOCE3NhLm9mZmljZWZpbmRlci5hcHCCFXNhbmRib3guZW52aW8uc3lzdGVtc4Id
c29sci1la3Mtc29scmNsb3VkLnRyZXBiaS5jb22CE3phLm9mZmljZWZpbmRlci5h
cHAwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNy
bDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNB
U0hBMjU2MjAyMENBMS00LmNybDB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGG
GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2Nh
Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0x
LmNydDAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY2s3kJEAAAEAwBGMEQC
IEk+8cuZTdBm8y2M0e51uqnKp0sTHazD/X75/HSwe5TTAiBq2G4WMwskUDa9hGWF
bcbVP7D2CozIILuc98KAViyTbgB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABjazeQn0AAAQDAEYwRAIgceGd7JDlYIMegpYISBY+k/b+z5x6Y9TV
6a7gxl0OLpsCIFAOqFQwWKuHGaRsakT/fu2zQy//aBeY9Y11rYfN558bAHYA2ra/
az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGNrN5CeQAABAMARzBFAiEA
q5BmpV9fbbSJQSxAkkeF4XgxlkLviOFQxvaeASUEqz8CIA8pW8ZinLXfIWKIyX6X
9lo6qlXcd/CtI8EwELmC5nRGMA0GCSqGSIb3DQEBCwUAA4IBAQAj0VtkP7q+0PyJ
yY8ChVjx3QEk1ndlhZUGtWekxoX7ExAW6pnBLmHn7NGDNwdDsmdf5dAIW8cKNpNq
7AlVTzV5kG1WT1KvirFoyhnJstYrtppyVrguzO5M+GOG/XPtlwIlxKRxumZl+p0X
zeldXVMIEAd9d6UI+XSdPvwdBNEXeZME8Kebrlx14F68of4k6xktXbYEDWgrNl79
HHbk/juUf0+R5lwbAL+KnHJb9Rc2ZiA+oRddRoGCGsIxoszS+szQjRbe6iz0B413
C6z2wjzW8/6nwpucmclGgxAW6AV0WZxBTxcL+lPDoU4BYKF+Ko5PIb0B/1LTEMgZ
FYhQYlTy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEvDHj9yx5/OqYDFI3d7A6LEyQDJDM
0WkD7N7M+3j1mhFnW6jt0XuZK7bE53cu87datU27J1QNlSq6+ntdtszZOA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20451814035854846354547977481594329607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle IP, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sansites5.jll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004bc31e3f72c79fcea980c523777b03a2c4c900c90ccd16903ecdeccfb78f59a11675ba8edd17b992bb6c4e7772ef3b75ab54dbb27540d952abafa7b5db6ccd938
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea11f37b532f95fd8490118f9591cf8cc65da44a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (941 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sansites5.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.officefinder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-ca.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-hyperloop-can.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-hyperloop-us.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-hyperloop.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod-canada.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod-frankfurt.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-prod-virginia.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sandbox.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbm-ca.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbm-sandbox.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbm-us.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbm.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.officefinder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-grafana.trepbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eg.officefinder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envio-backstage-api-zipline-ca.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envio-backstage-api-zipline-us.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envio-backstage-api-zipline.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearbox-sol-sandbox.production-frankfurt03-cluster.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperloop-can.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperloop-us.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyperloop.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.officefinder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-canada.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-frankfurt.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-virginia.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sa.officefinder.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solr-eks-solrcloud.trepbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'za.officefinder.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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