san2317.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 03:36:b2:4d:16:e7:08:3f:9f:32:d7:06:64:d4:ac:27:b0:dc was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san2317.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:b2:4d:16:e7:08:3f:9f:32:d7:06:64:d4:ac:27:b0:dc
Serial Number (int): 279949108463636508789329321769388372111580
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 83:ef:84:7e:d1:c3:6c:38:52:fb:ea:46:14:16:40:c2:ff:c3:6a:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:55:44:02:73:9c:9e:37:9a:d4:73:9d:82:77:2a:e4:5a:3a:f2:7e
Fingerprint (sha256): 18:af:63:36:ee:a9:46:54:fd:02:69:15:42:c9:02:d5:67:16:53:27:d9:bf:42:80:69:59:7b:d0:da:0e:9b:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san2317.cdntwrk.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2317.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

absorb.ufcontent.com
access.parexel.com
api2.relevantize.com
apprissretail.ufcontent.com
autodesk-de.ufcontent.com
autodesk-jp.ufcontent.com
automation.omron.ufcontent.com
beaverton-v1.ufcontent.com
biopharm.parexel.com
carlislesustainability.ufcontent.com
charleston-v1.ufcontent.com
chinahub.parexel.com
clearwater.ufcontent.com
clinicaldevelopment.parexel.com
cloudera-public-sector.ufcontent.com
core.relevantize.com
demandbase.ufcontent.com
digital.canadianlawyermag.com
digital.carswellmedia.com
digital.hrreporter.com
digital.lawtimesnews.com
diwo.ufcontent.com
ecosys.ufcontent.com
experience.hyperfine.io
fe.relevantize.com
fieldtech.ufcontent.com
fullstory-test.ufcontent.com
hktw-resources.awscloud.com
hub.acxiom.com
hub.birthdaypartyvenues.com
hub.newyorkparties.com
hub.theeventplannerexpo.com
hub.yostar.com
informatics.parexel.com
insightcenter.parexel.com
issues.floridadoctormag.com
latam-pt-resources.awscloud.com
logicgate.ufcontent.com
medcom.parexel.com
mspicerfr.ufcontent.com
nasdaq.ufcontent.com
nfi.ufcontent.com
onelogin-french.ufcontent.com
onelogin-german.ufcontent.com
onelogin-japanese.ufcontent.com
onfido.ufcontent.com
pandadoc.ufcontent.com
paradox.ufcontent.com
piano-sandbox.ufcontent.com
qa1-theme.ufcontent.com
qa2-theme.ufcontent.com
raken.ufcontent.com
regulatory.parexel.com
resources.careerbuilder.com
resources.dinersclub.com
resources.humansecurity.com
resources.hyperfine.io
resources.strategiccoach.com
resources.vibes.com
rjenkins2.ufcontent.com
rogersenterprise-en.ufcontent.com
rogersenterprise-fr.ufcontent.com
rubine-v1.ufcontent.com
san2317.cdntwrk.com
shout-v2.relevantize.com
smallbusiness-fr.ufcontent.com
strategicaccounts.ufcontent.com
sunrise.ufcontent.com
t-lungs-prod.relevantize.com
testhub.relevantize.com
tgarvey.ufcontent.com
thoughtleader.parexel.com
thousandeyes.ufcontent.com
tv2trimble-de.ufcontent.com
tv2trimble-fr.ufcontent.com
tv2trimble-nl.ufcontent.com
twilio.ufcontent.com
ukg.ufcontent.com
venafi.ufcontent.com
webhooks.relevantize.com
wileysocietyleader.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san2317.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINajCCDFKgAwIBAgISAzayTRbnCD+fMtcGZNSsJ7DcMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA4MDkxMzUwNThaFw0yMTExMDcxMzUwNTZaMB4xHDAaBgNVBAMT
E3NhbjIzMTcuY2RudHdyay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmldSVkDQ+Uy6/33Bh78bMgj/zDiCz7KvATFLTUnjW6F7MXlpIX+/RXKLA
CFWqCfBnWlAwCwaT7SRb3tkmhxTY7oYcqXlVC97haATUUrVYwEazr0zfe+JqNAi0
aoxE4vJmccqzjq9kpdDmxUBm74q80NeHHiT+vh4eqAXoUMetn6GossFxzlCs7ufw
2O0nUE4w//oLhGQ/d8uSBFrcPB07qFp3UaUwxzzdQHEKz6loa8pqoA3XRx7NNGFG
Dw/GGmYXN76cmWoi0T7Sdo0YhTCJm7ODmTzWQmrbRxXqpz+9pHEluj0ODEUJs9uh
qjgx6G6YZB2SH98zbUYuUafutiC1AgMBAAGjggqMMIIKiDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFIPvhH7Rw2w4UvvqRhQWQML/w2pXMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIIWwYDVR0RBIIIUjCCCE6CFGFic29yYi51ZmNvbnRlbnQuY29tghJh
Y2Nlc3MucGFyZXhlbC5jb22CFGFwaTIucmVsZXZhbnRpemUuY29tghthcHByaXNz
cmV0YWlsLnVmY29udGVudC5jb22CGWF1dG9kZXNrLWRlLnVmY29udGVudC5jb22C
GWF1dG9kZXNrLWpwLnVmY29udGVudC5jb22CHmF1dG9tYXRpb24ub21yb24udWZj
b250ZW50LmNvbYIaYmVhdmVydG9uLXYxLnVmY29udGVudC5jb22CFGJpb3BoYXJt
LnBhcmV4ZWwuY29tgiRjYXJsaXNsZXN1c3RhaW5hYmlsaXR5LnVmY29udGVudC5j
b22CG2NoYXJsZXN0b24tdjEudWZjb250ZW50LmNvbYIUY2hpbmFodWIucGFyZXhl
bC5jb22CGGNsZWFyd2F0ZXIudWZjb250ZW50LmNvbYIfY2xpbmljYWxkZXZlbG9w
bWVudC5wYXJleGVsLmNvbYIkY2xvdWRlcmEtcHVibGljLXNlY3Rvci51ZmNvbnRl
bnQuY29tghRjb3JlLnJlbGV2YW50aXplLmNvbYIYZGVtYW5kYmFzZS51ZmNvbnRl
bnQuY29tgh1kaWdpdGFsLmNhbmFkaWFubGF3eWVybWFnLmNvbYIZZGlnaXRhbC5j
YXJzd2VsbG1lZGlhLmNvbYIWZGlnaXRhbC5ocnJlcG9ydGVyLmNvbYIYZGlnaXRh
bC5sYXd0aW1lc25ld3MuY29tghJkaXdvLnVmY29udGVudC5jb22CFGVjb3N5cy51
ZmNvbnRlbnQuY29tghdleHBlcmllbmNlLmh5cGVyZmluZS5pb4ISZmUucmVsZXZh
bnRpemUuY29tghdmaWVsZHRlY2gudWZjb250ZW50LmNvbYIcZnVsbHN0b3J5LXRl
c3QudWZjb250ZW50LmNvbYIbaGt0dy1yZXNvdXJjZXMuYXdzY2xvdWQuY29tgg5o
dWIuYWN4aW9tLmNvbYIbaHViLmJpcnRoZGF5cGFydHl2ZW51ZXMuY29tghZodWIu
bmV3eW9ya3BhcnRpZXMuY29tghtodWIudGhlZXZlbnRwbGFubmVyZXhwby5jb22C
Dmh1Yi55b3N0YXIuY29tghdpbmZvcm1hdGljcy5wYXJleGVsLmNvbYIZaW5zaWdo
dGNlbnRlci5wYXJleGVsLmNvbYIbaXNzdWVzLmZsb3JpZGFkb2N0b3JtYWcuY29t
gh9sYXRhbS1wdC1yZXNvdXJjZXMuYXdzY2xvdWQuY29tghdsb2dpY2dhdGUudWZj
b250ZW50LmNvbYISbWVkY29tLnBhcmV4ZWwuY29tghdtc3BpY2VyZnIudWZjb250
ZW50LmNvbYIUbmFzZGFxLnVmY29udGVudC5jb22CEW5maS51ZmNvbnRlbnQuY29t
gh1vbmVsb2dpbi1mcmVuY2gudWZjb250ZW50LmNvbYIdb25lbG9naW4tZ2VybWFu
LnVmY29udGVudC5jb22CH29uZWxvZ2luLWphcGFuZXNlLnVmY29udGVudC5jb22C
FG9uZmlkby51ZmNvbnRlbnQuY29tghZwYW5kYWRvYy51ZmNvbnRlbnQuY29tghVw
YXJhZG94LnVmY29udGVudC5jb22CG3BpYW5vLXNhbmRib3gudWZjb250ZW50LmNv
bYIXcWExLXRoZW1lLnVmY29udGVudC5jb22CF3FhMi10aGVtZS51ZmNvbnRlbnQu
Y29tghNyYWtlbi51ZmNvbnRlbnQuY29tghZyZWd1bGF0b3J5LnBhcmV4ZWwuY29t
ghtyZXNvdXJjZXMuY2FyZWVyYnVpbGRlci5jb22CGHJlc291cmNlcy5kaW5lcnNj
bHViLmNvbYIbcmVzb3VyY2VzLmh1bWFuc2VjdXJpdHkuY29tghZyZXNvdXJjZXMu
aHlwZXJmaW5lLmlvghxyZXNvdXJjZXMuc3RyYXRlZ2ljY29hY2guY29tghNyZXNv
dXJjZXMudmliZXMuY29tghdyamVua2luczIudWZjb250ZW50LmNvbYIhcm9nZXJz
ZW50ZXJwcmlzZS1lbi51ZmNvbnRlbnQuY29tgiFyb2dlcnNlbnRlcnByaXNlLWZy
LnVmY29udGVudC5jb22CF3J1YmluZS12MS51ZmNvbnRlbnQuY29tghNzYW4yMzE3
LmNkbnR3cmsuY29tghhzaG91dC12Mi5yZWxldmFudGl6ZS5jb22CHnNtYWxsYnVz
aW5lc3MtZnIudWZjb250ZW50LmNvbYIfc3RyYXRlZ2ljYWNjb3VudHMudWZjb250
ZW50LmNvbYIVc3VucmlzZS51ZmNvbnRlbnQuY29tghx0LWx1bmdzLXByb2QucmVs
ZXZhbnRpemUuY29tghd0ZXN0aHViLnJlbGV2YW50aXplLmNvbYIVdGdhcnZleS51
ZmNvbnRlbnQuY29tghl0aG91Z2h0bGVhZGVyLnBhcmV4ZWwuY29tghp0aG91c2Fu
ZGV5ZXMudWZjb250ZW50LmNvbYIbdHYydHJpbWJsZS1kZS51ZmNvbnRlbnQuY29t
ght0djJ0cmltYmxlLWZyLnVmY29udGVudC5jb22CG3R2MnRyaW1ibGUtbmwudWZj
b250ZW50LmNvbYIUdHdpbGlvLnVmY29udGVudC5jb22CEXVrZy51ZmNvbnRlbnQu
Y29tghR2ZW5hZmkudWZjb250ZW50LmNvbYIYd2ViaG9va3MucmVsZXZhbnRpemUu
Y29tgiB3aWxleXNvY2lldHlsZWFkZXIudWZjb250ZW50LmNvbTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AJQg
vB6O1Y1siHMfgosiLA3R2k1ebE+UPWHbTi9YTaLCAAABeytlN7sAAAQDAEYwRAIg
c58sBeE/3+RmGDIL0wjwuzCR7+SDUK/fYpac2/LCNp8CIEDCWhxVeJVOR+sTEQ+r
PvBdcpgCfG4ZOkZmN+Xb+FH6AHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyAL
zE7xZOMAAAF7K2U3xgAABAMARzBFAiAw9/5WuJBzc0UVDIyg0Df6CBte6fqk4bnz
KQZGU/ZS7QIhALgTMPsQ+nFYN8ICAq1WF8W9QV+/GxBDQsVO87rEMDJbMA0GCSqG
SIb3DQEBCwUAA4IBAQCPiOjgZMVizaFvAfNpo9UPjDhMTW1Sa9sTZIlN0gLqLBYh
rfGZlVY2gZjIbeb8ZHIEQCQGTgASwFEH3TXYpfwLwdO4D3EGUHC2WOyYWFX+urP9
nL8mNQz8m8SwEjUllBfQOfku/mRiVLMxjpEDIVdl0OJ0F6kRnmg7bQGK9F1WNC05
vcJ2bmt4jEqgJwkipLKwMLS5SIbCEkHx3jIvRmww9166GnvMLuDJ3MgtKVX7gETv
cxEGd1v5547h2siKsmgKh7inUm6/ATtKZGNcYhayWwY1481+T6Bp1hz1CpbA1Qn6
k83elAlPZwiH5qPpFli+f0aPoMiJsWsgtxLq4j4Z
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppXUlZA0PlMuv99wYe/G
zII/8w4gs+yrwExS01J41uhezF5aSF/v0VyiwAhVqgnwZ1pQMAsGk+0kW97ZJocU
2O6GHKl5VQve4WgE1FK1WMBGs69M33viajQItGqMROLyZnHKs46vZKXQ5sVAZu+K
vNDXhx4k/r4eHqgF6FDHrZ+hqLLBcc5QrO7n8NjtJ1BOMP/6C4RkP3fLkgRa3Dwd
O6had1GlMMc83UBxCs+paGvKaqAN10cezTRhRg8PxhpmFze+nJlqItE+0naNGIUw
iZuzg5k81kJq20cV6qc/vaRxJbo9DgxFCbPboao4MehumGQdkh/fM21GLlGn7rYg
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279949108463636508789329321769388372111580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-09 13:50:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-07 13:50:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san2317.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21029442751832906131161029190487801255980571112251444447642165811054540284991247827037672405510118663460982690475505389711766023352846612229259580549129710544695058281966318777649403472787495865595228663505652261496336556206105842925868113766609224319789278819162107367045628950965842696493800110129456589202326189502292867031628723134807692057331107393884416797299585735113964653784184122348636779642296399057850020466669265090157997814204626927052089024791577821237716481925363265404258777049251602932660792670484997155636812772069775255579627022459606082264425954182473158613850719086328312365554763611599896191157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83ef847ed1c36c3852fbea46141640c2ffc36a57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2130 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absorb.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprissretail.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodesk-de.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodesk-jp.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automation.omron.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaverton-v1.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biopharm.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlislesustainability.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charleston-v1.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinahub.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwater.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicaldevelopment.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudera-public-sector.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandbase.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.canadianlawyermag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.carswellmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.hrreporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.lawtimesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diwo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecosys.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.hyperfine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldtech.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullstory-test.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hktw-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.birthdaypartyvenues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.newyorkparties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.theeventplannerexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.yostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informatics.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insightcenter.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issues.floridadoctormag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam-pt-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicgate.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medcom.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mspicerfr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasdaq.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfi.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelogin-french.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelogin-german.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelogin-japanese.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onfido.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandadoc.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradox.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piano-sandbox.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-theme.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-theme.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raken.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulatory.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.careerbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dinersclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.humansecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.hyperfine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.strategiccoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.vibes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjenkins2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogersenterprise-en.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogersenterprise-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubine-v1.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2317.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shout-v2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusiness-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategicaccounts.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrise.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-lungs-prod.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testhub.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgarvey.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtleader.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thousandeyes.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv2trimble-de.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv2trimble-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv2trimble-nl.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twilio.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukg.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venafi.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhooks.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wileysocietyleader.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017b2b6537bb00000403004630440220739f2c05e13fdfe46618320bd308f0bb3091efe48350afdf62969cdbf2c2369f022040c25a1c5578954e47eb13110fab3ef05d7298027c6e193a466637e5dbf851fa007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017b2b6537c60000040300473045022030f7fe56b890737345150c8ca0d037fa081b5ee9faa4e1b9f329064653f652ed022100b81330fb10fa715837c20202ad5617c5bd415fbf1b104342c54ef3bac430325b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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