cert1.a2.atm.aqfer.net

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:87:06:fc:6d:ad:a0:f2:03:dd:d8:e0:c0:9b:67:5a:00 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert1.a2.atm.aqfer.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:87:06:fc:6d:ad:a0:f2:03:dd:d8:e0:c0:9b:67:5a:00
Serial Number (int): 414643404962771988662188062518640925694464
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c8:0c:ff:1e:e4:83:8d:35:d7:3b:b2:89:cf:90:f1:7b:d9:70:22:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:73:4f:0a:f9:f0:70:20:df:89:1a:91:0c:8a:7e:6e:05:a6:03:f3
Fingerprint (sha256): 16:73:8d:d9:5d:a1:c7:04:c5:9b:b4:1c:9b:d0:86:54:16:73:b8:41:79:c2:d2:82:d0:80:d4:e0:85:cd:3d:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert1.a2.atm.aqfer.net

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert1.a2.atm.aqfer.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.myaquagames.com
aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c020.preprod.aqfer.net
c021.preprod.aqfer.net
c025.aqfer.net
c029.aqfer.net
c031.aqfer.net
c033.aqfer.net
c034.aqfer.net
c035.aqfer.net
c036.aqfer.net
c037.aqfer.net
c038.aqfer.net
c041.aqfer.net
c044.aqfer.net
c046.aqfer.net
c049.aqfer.net
c050.aqfer.net
c055.aqfer.net
c056.aqfer.net
c057.aut-prod.aqfer.net
c900.aqfer.com
c900.aut-prod.aqfer.net
c901.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
maxt.umzu.com
mcdp.modernatx.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.farmers.com
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.nypost-preprod.alley.ws
t.nypost.com
t.onclive.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t1.aiproxies.com

Other certificates including the domain name aqfer.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
*.api-preprod-new.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
portal.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
support.gotinfotech.com
cert1.a2.atm.aqfer.net
support.gotinfotech.com
*.api-preprod-new.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a1.atm.aqfer.net
*.api-preprod.aqfer.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
*.api-preprod-new.aqfer.net
neutralid.airdxp.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
concourse.aqfer.net
*.api-preprod-new.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
docs.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert1.a1.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
auth.portal.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net

Certificate

The complete raw certificate details for cert1.a2.atm.aqfer.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+8+YJ9kQjTFGDoCIV8C
5dwzyFSd0YiqyjizDPNjZe2Gqn5mwld/vG7kPoYGPKQ/PP/u1428wGkzQ/YBMQxo
oVcS07/lrA8GCAGMUzAtll5xbXdMxogue6WXzI5R/Ms+DVd2ntWgcOldWHznQ5K7
Ctf7us4O/08tNB8ER59fticn+iiclXhJqI7Y8KuRCbVR7JiVTPRlyxQ/yn9d8rOI
EYtGV4bgxZogRnPScijFJxm2NSLGpCv8nbQ/lgEfwB9frJnB5w1pXBKx3bI+irP4
ADGk984mz5uHn/jWGNpGoztFCb7O+eVNddPAsZ6TOXESv4pldgkb0Cxu5D2wDekf
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414643404962771988662188062518640925694464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 10:23:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 10:23:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert1.a2.atm.aqfer.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21199772375992292796490572414147006178012773007153967641351039218176076274968655238902193322749131683268625241216921063534286933966033920926265175628638491549974418494871388230707436935076772716007267112173101194653037762028791423272708219412158587285318464472170114119635424861992574329536732873415883466300347997498728268411936867688938998921313185653047174132037988948431123138828773205554518534451951876918459135663701393977102446397039208312894649120252630105860953742474342541433277095947361113298983111932256202410473967959655722938433045000821799678372408056582487584767904749706772840255070139390368091283273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c80cff1ee4838d35d73bb289cf90f17bd97022f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1571 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.myaquagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c020.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c021.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c025.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c029.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c031.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c033.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c034.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c035.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c037.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c038.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c041.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c044.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c046.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c049.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c055.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c056.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c057.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdp.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.farmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184c320877e0000040300483046022100c1da3b00f0bccfa3324f8b9c7ac13b97a50de9652b0e19cdbd3c120b579493dd022100c01fddfe081671a42ebf7f4c4e12e94d487aadafcc0c1bd6de3094bc45178395007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184c32087810000040300483046022100b1aee533a3dbb77de36e4db789abf8e667ae8a3516c16483a9043f8af65c4e56022100bd693e34852d4f0a472ea769bb460ac51321aaae0bb15354ad0a16df822184b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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