www.openavm.com

- Jones Lang LaSalle IP, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:20:7d:e7:61:96:73:50:4d:d5:ac:f2:70:95:d7:12 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jones Lang LaSalle IP, Inc.

Organization: Jones Lang LaSalle IP, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:20:7d:e7:61:96:73:50:4d:d5:ac:f2:70:95:d7:12
Serial Number (int): 16119443082000031591929939137666602770
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:d7:c1:ea:7c:fa:2c:33:80:89:32:bf:88:a6:ad:c1:d7:e8:62:00
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f2:88:60:5e:b4:b0:e0:28:b4:7a:b3:de:47:b7:0c:a3:a9:17:6a:c1
Fingerprint (sha256): 13:eb:b8:70:c6:a8:af:7b:3b:1e:93:fb:81:d9:c6:bf:af:5d:23:82:d1:9d:41:68:9b:14:cc:d5:42:77:99:9e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.openavm.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.openavm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.openavm.com
230congress.com
260franklinstreet.com
525westvanburen.com
analytics.azara.jllt.com
api-demo.envio.systems
api-us.envio.systems
api.envio.systems
api.openavm.com
api.suburbtrends.openavm.com
aztest-ent-noc-emea.corrigo.net
aztest-pro-noc-emea.corrigo.net
bigredrooster.com
brg.com
brooklyn.orchardworkspace.com
ca.envio.systems
cdn-spark.jllt.com
cdn.tetris-db.com
chicago.thepitchworkspace.com
data.azara.jllt.com
dev-analytics.azara.jllt.com
dev-data.azara.jllt.com
dev-reports.azara.jllt.com
dev.bigredrooster.com
dev.ebrochure.jll.eu
dev.logcheck.com
dev.spark.jllt.com
ebrochure.jll.eu
echelon-jll.com
elblogdelosanillos.jll.es
ent-noc-emea.corrigo.net
envio.systems
enviosystems.com
eri.live.jll.com
forum.jllcab.live.jll.com
humanexperience.jll
jll-emea-evohtmltopdf.jll.eu
jlleulive.openavm.com
jllhub.com
jlllive.openavm.com
jlluslive.openavm.com
jllvirtual.openavm.com
lafayetteccboston.com
lochrinquay.com
logcheckapp.com
onebeaconstreet.com
onepostofficesq.com
orchardworkspace.com
pennplaceframingham.com
powerupwithcapforce.com
preprod-analytics.azara.jllt.com
preprod-data.azara.jllt.com
preprod-reports.azara.jllt.com
preprod.azara.jllt.com
presidentsplacequincy.com
pro-noc-emea.corrigo.net
reports.azara.jllt.com
seattle.orchardworkspace.com
site.atginc.com
spark-dev.jllt.com
spark-qa.jllt.com
spark.jllt.com
stg.bigredrooster.com
stg.logcheck.com
stg.spark.jllt.com
suburbtrends.openavm.com
techup.live.jll.com
thepitchworkspace.com
twolibertyboston.com
uat-api.openavm.com
uat.ebrochure.jll.eu
uat.openavm.com
uniontrustbuilding.com
welcome.jll
www.230congress.com
www.260franklinstreet.com
www.525westvanburen.com
www.bigredrooster.com
www.envio.systems
www.enviosystems.com
www.lafayetteccboston.com
www.logcheck.com
www.logcheckapp.com
www.onebeaconstreet.com
www.onepostofficesq.com
www.pennplaceframingham.com
www.presidentsplacequincy.com
www.twolibertyboston.com
www.uniontrustbuilding.com

Other certificates including the domain name openavm.com

(limited to 100 certificates)
*.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
www.openavm.com
*.openavm.com
www.openavm.com
www.openavm.com

Certificate

The complete raw certificate details for www.openavm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCjdQ7szyokKWyQGrRLJ
TbvcJrq2Jr89DFafh2y9QW41An/fyeLMsEqmQ0KeW+dea84qyt8M+nfPqfnw2rBO
UHriRIU0gjkVeLnqA4Gsb8YZhouyc96fZ8866JMgh6cqDjTHQeQg/mDKgjYa1oIF
Jt9w67TYfJgO9JJVvDIBFrWnPcoMGBrSCSBKSVusooY19lZCNFEhFAfXDBmmJL6B
O73c35SYz5vAv+ZgvWrASU+vEOamELqG13lpI8DsHdGm7ER0ECQ87JX58h5VDsgB
5dtQtn5CmLBnEkhA/Z2gLyIumCBIn3SRzFJ0+3XOkeQGP7dTwNeHdBp5DZn9WPUH
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16119443082000031591929939137666602770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle IP, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.openavm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22238092618664052193787836345730291097682377119358158845823007145825812278050468248328008993811445574451369552163167294579166949051879717824639663779092402158864113925850011379973414949339121774001170614280556706222010858940722247405337376436403408962096048735296597026390429265527388475421423125370266434253183438949351220513643646684249833349294554856621361159723729531837007162285381733129931500320316087565925754603179612186397803292113826416240809042314291635329025557109815532140543682148970780875067095137455156340602892530342603177073175473642879332030480310788754648793818742655679267862634148608295795230661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7d7c1ea7cfa2c33808932bf88a6adc1d7e86200
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2026 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '230congress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '260franklinstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '525westvanburen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-demo.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.suburbtrends.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aztest-ent-noc-emea.corrigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aztest-pro-noc-emea.corrigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigredrooster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-spark.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tetris-db.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.thepitchworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-analytics.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-data.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-reports.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bigredrooster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ebrochure.jll.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.logcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.spark.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebrochure.jll.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echelon-jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elblogdelosanillos.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ent-noc-emea.corrigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enviosystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eri.live.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.jllcab.live.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanexperience.jll'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll-emea-evohtmltopdf.jll.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlleulive.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlllive.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlluslive.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllvirtual.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafayetteccboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lochrinquay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logcheckapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onebeaconstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onepostofficesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennplaceframingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerupwithcapforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-analytics.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-data.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-reports.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presidentsplacequincy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-noc-emea.corrigo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.azara.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattle.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.atginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark-dev.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark-qa.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.bigredrooster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.logcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.spark.jllt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbtrends.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techup.live.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepitchworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twolibertyboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-api.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ebrochure.jll.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.openavm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniontrustbuilding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.jll'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.230congress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.260franklinstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.525westvanburen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigredrooster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envio.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enviosystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lafayetteccboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logcheckapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onebeaconstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onepostofficesq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennplaceframingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.presidentsplacequincy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twolibertyboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniontrustbuilding.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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