www.highq.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 65:04:37:dc:fe:ad:b6:a8:7c:55:f8:f9:28:71:0a:9d was issued on by Sectigo Limited.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.highq.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 65:04:37:dc:fe:ad:b6:a8:7c:55:f8:f9:28:71:0a:9d
Serial Number (int): 134273929803253795693953428496806120093
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 01:3b:53:c7:1f:b2:b6:07:95:6a:1d:67:e6:75:bc:83:51:c0:90:18
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 45:5f:60:91:29:77:14:c8:c6:33:39:5e:cf:8a:c1:39:3c:1b:d2:ea
Fingerprint (sha256): 17:78:ca:90:2c:cc:79:f1:7a:75:1b:6f:e9:db:02:26:da:04:19:a9:20:45:4d:e3:a3:f1:f6:df:46:5a:36:5f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate www.highq.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.highq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.highq.com
1800flowersinc.highq.com
allenmatkins.highq.com
at.haavind.no
ats.highq.com
axioma.highq.com
bastion.macfarlanes.com
beneschlaw.highqsolutions.com
blakes.highq.com
businessportal.andersen-partners.dk
cccapital.highq.com
clientportal.fieldfisher.com
clientspace.cleggssolicitors.com
collaborate.biosev.com
collaborate.burr.com
collaborate.cms-fl.com
collaborate.elvingerhoss.lu
collaborate.ngelaw.com
collaborate.penningtons.co.uk
collaborate.wottonkearney.com
collaborate1can1.highq.com
collaborate1can2.highq.com
contentexperience.highq.com
contractexpress.highq.com
cooleyp4.highq.com
cp.highq.com
dataroom.stephens-scown.co.uk
demop4.highq.com
direct2.dentons.com
direct3.dentons.com
direct4.dentons.com
dynamic.gowlingwlg.com
eu.collaborate.hoganlovells.com
eversheds-sutherlanduat.highq.com
extranet.cms-hs.com
extranet.s-s.mx
extranets.bassberry.com
fasken.highq.com
freedomfinancial.highq.com
highqdemo1.highq.com
highqdemo2.highq.com
highqdemo3.highq.com
highqdemo4.highq.com
highqdemo5.highq.com
highqdemo6.highq.com
highqdemo7.highq.com
hive.thras.io
hub.flintgrp.com
ilta.highq.com
integrationbeta.highq.com
knowledge.highq.com
legal.goodfoodholdings.com
legalconnect.highq.com
leviton.highq.com
members.lpc.org.uk
ms.highq.com
mtinnovate.mccarthy.ca
online.austoncorp.com.au
online.campaignlegalcenter.org
opflegal.op-f.org
osler.highq.com
pacificlife.highq.com
prototype1.highq.com
publisher.dentons.com
search-acumen.highq.com
secloreuat.highq.com
securecollaboration.macquarie.com
securitytest2.highq.com
seeunity.highq.com
seeunitylive.highq.com
sente.highq.com
share.proskauer.com
share4.whitecase.com
supportreporting.highq.com
terralex.highq.com
traffickingresearch.wearelumos.org
trpartnership.highq.com
uat.highqhub.com
uatcollaborate.allens.com.au
us.collaborate.hoganlovells.com
vault.life-safe.com
workflowuat.highq.com
www.bmgs.aocollaborate.com
www.jacmac.com.au
www.mydittmar.fi

Other certificates including the domain name highq.com

(limited to 100 certificates)
cwp.status.symantec.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
andrei.sterda.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ccd.status.symantec.com

www.highq.com
cc3.status.jasper.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
www.highq.com
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
thomsonreuters.com
api-status.360cities.net
www.highq.com
www.highq.com
cc3.status.jasper.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

*.hqdev.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
offers.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
highq.com
offers.highq.com
cwp.status.symantec.com
www.highq.com
www.highq.com
www.highq.com
eboks-status.reepay.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
www.highq.com
support2.cdnetworks.net
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.highq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S5RDaB4BzN1xsKVNrBq
CvARkeZ4epHE6Q2od5aX45m9FiQoQNMxt1sbD5zGdkTs8+3XnUfzihW7Zrtt4XZt
I4b83QcV8QhK12UTWXqXdiT7F2UnaxJEbqjuEQi+GH/GkILvytx9neu3VrDsHXx/
+dmySJKPB5UaWtq3k7ep8HRHNDBeirslC/Pq3zzrrBB1Z3AnAWtdADxNPHKyHt0R
10Yyh+nGQMv2sPiOnKJRtRk9OM2stKKG/iZRRl7x2oOycqD/kbqmuVoF94btRegV
HwxCDl878rkX/GdmaVrMmJznoCEZMbCqUi7g4ZB3dn5mNjBXUJD+relDN27+ciJ2
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134273929803253795693953428496806120093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28426458191057397869398100669641490963657318480477137748569156375055572685811232546864283222089264319116529872209653159250449473202006706377354619789223071067231701586901650437281921450625230539699639322693035766557662991939236711759073861075831169567648824702892922350231146581333128023403957338428689434826514044008532249440652861104102514600578891726231569181413896433757627066814094499038470632896127973702047466891356881251252938889158052509676210627736711862461160875540761005227473129495573105403548696128361687848433290677646649989519579353373390888038624016945730645956698332432074537712274278286858240816689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							013b53c71fb2b607956a1d67e675bc8351c09018
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800flowersinc.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenmatkins.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.haavind.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ats.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axioma.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bastion.macfarlanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneschlaw.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blakes.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessportal.andersen-partners.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccapital.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.fieldfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientspace.cleggssolicitors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.biosev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.burr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.cms-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.elvingerhoss.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.ngelaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.penningtons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.wottonkearney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate1can1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate1can2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentexperience.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contractexpress.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooleyp4.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.stephens-scown.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demop4.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct2.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct3.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct4.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamic.gowlingwlg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.collaborate.hoganlovells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eversheds-sutherlanduat.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.cms-hs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.s-s.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranets.bassberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasken.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomfinancial.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo3.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo4.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo5.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo6.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highqdemo7.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.thras.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.flintgrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilta.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrationbeta.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.goodfoodholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalconnect.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leviton.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.lpc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtinnovate.mccarthy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.austoncorp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.campaignlegalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opflegal.op-f.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osler.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificlife.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype1.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publisher.dentons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-acumen.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secloreuat.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securecollaboration.macquarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitytest2.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeunity.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeunitylive.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sente.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.proskauer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share4.whitecase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportreporting.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terralex.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traffickingresearch.wearelumos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trpartnership.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.highqhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatcollaborate.allens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.collaborate.hoganlovells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vault.life-safe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflowuat.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmgs.aocollaborate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacmac.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydittmar.fi'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c2beab3426dca155bae863a6290783c14375d1a1f688a33d8193828f4faaf98ca0fd903adc05e86c3bca7d4c4cb44a0fcb0a47724594cb6c1e86d8d9c12d43c246805a71ccfcf638b8abd398c6a93083a23c45c4a353109adc23784003a95c2cba0d50d0757ad48ede0b66645706346322c87e9a18c26d5b7d89f567a72b87a18104ebf849275449640c96179e45eb68e36090f0811be26f732041825a81255582a648dbe91b4a72f038dcaf3834cb272a1c6d92473fcecf145dec1e87dc4992c0f56d8230720a74e70228399fa78cf144b4914ee2b5280c7c3f79b9b7b7feab8f4182f0dac2419abae3c49234cd1d0843629bc1e36e108286e565ecca584e6d