cert2-prod.aut.a24365.net

Issued by R3

About this certificate

This digital certificate with serial number 04:a0:64:0a:fc:4a:a9:90:0e:3e:e2:9b:5d:cb:38:8a:dd:12 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cert2-prod.aut.a24365.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a0:64:0a:fc:4a:a9:90:0e:3e:e2:9b:5d:cb:38:8a:dd:12
Serial Number (int): 403027302274020798941729698490796506537234
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 92:97:48:ed:61:73:82:d0:63:49:a3:a9:e5:39:79:dc:1e:78:c9:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:f6:53:96:97:fb:7d:90:a7:b8:c8:7b:40:e6:eb:c5:b0:2a:7f:4d
Fingerprint (sha256): 1b:c5:4e:46:97:9f:de:d5:55:de:af:0f:48:4f:02:af:7f:25:6d:9f:d0:1b:39:45:d7:34:12:45:ec:73:13:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert2-prod.aut.a24365.net

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert2-prod.aut.a24365.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
api.us-east-1.a.rdata.rapid.acxiom.io
api.us-east-1.a.rgraph360.rapid.acxiom.io
aqfer.lijit.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c036.aut-prod.aqfer.net
c045.aut-prod.aqfer.net
c066.aut-prod.aqfer.net
c067.aut-prod.aqfer.net
c900.aut-prod.aqfer.com
c900.aut-prod.aqfer.net
c901.aut-prod.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
comsync.lijit.com
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aut-prod.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
h1.c054.aut-prod.aqfer.net
h1.c901.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
marketing.aut-prod.aqfer.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.breadfinancial.com
rtag.comenity.net
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.nypost-preprod.alley.ws
t.nypost.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.retail.aqfer.com
t1.aiproxies.com

Other certificates including the domain name a24365.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net

Certificate

The complete raw certificate details for cert2-prod.aut.a24365.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKdzCCCV+gAwIBAgISBKBkCvxKqZAOPuKbXcs4it0SMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjkwNjQ1NDZaFw0yMzEyMjgwNjQ1NDVaMCQxIjAgBgNVBAMT
GWNlcnQyLXByb2QuYXV0LmEyNDM2NS5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAMacMOCZ+pLYoNDu8YV5ltgN2ZUyQmhDYtPq1AjkFvm0SQRPK
z9MrPB17siraxY9leVHXg6FM6SLanfWwUeOE+KvmNhrb7ELUCmICfhxNQQhVeEmR
eKiVjq5JhymwDckFmueCs9bIEhlaoI4c2n+YsDBD/I0uh5dYMxrvbozd0272xenE
bnfWYOm+UreuKSsoJIGUtRKKGaoFW48fweg0qNsN4pu9owcO3K0SqQbDbQCvF2+C
V/f8f6VwPbcHNqT+dg2aEzdoQ/9o5E1MzXVHG3qxTLEohHnnIRgMH8ptTofsUlG+
nXnJnmApUx1YLnffeEcXBYLNu1P1EMfSSViDAgMBAAGjggeTMIIHjzAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFJKXSO1hc4LQY0mjqeU5edweeMnLMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIFmgYDVR0RBIIFkTCCBY2CGWFpby5hcGktcHJlcHJvZC5h
cWZlci5uZXSCKGFwaS51cy1lYXN0LTEuYS5pbnNpZ2h0cy5yYXBpZC5hY3hpb20u
aW+CJWFwaS51cy1lYXN0LTEuYS5yZGF0YS5yYXBpZC5hY3hpb20uaW+CKWFwaS51
cy1lYXN0LTEuYS5yZ3JhcGgzNjAucmFwaWQuYWN4aW9tLmlvgg9hcWZlci5saWpp
dC5jb22CFWF1dC5wZW5kbGV0b24tdXNhLmNvbYIWYXV0cy5wZW5kbGV0b24tdXNh
LmNvbYIRYXguY2x1YnB1YmxpeC5jb22CFmF4LmdyZWVud2lzZW1hcmtldC5jb22C
DWF4LnB1YmxpeC5jb22CF2MwMzYuYXV0LXByb2QuYXFmZXIubmV0ghdjMDQ1LmF1
dC1wcm9kLmFxZmVyLm5ldIIXYzA2Ni5hdXQtcHJvZC5hcWZlci5uZXSCF2MwNjcu
YXV0LXByb2QuYXFmZXIubmV0ghdjOTAwLmF1dC1wcm9kLmFxZmVyLmNvbYIXYzkw
MC5hdXQtcHJvZC5hcWZlci5uZXSCF2M5MDEuYXV0LXByb2QuYXFmZXIubmV0ghZj
ZXJ0MS5hMi5hdG0uYXFmZXIubmV0ghljZXJ0Mi1wcm9kLmF1dC5hMjQzNjUubmV0
ghFjb21zeW5jLmxpaml0LmNvbYIaZGJkcy5haW8tcHJlcHJvZC5hcWZlci5uZXSC
HGRiZHMuYzkwMC5hdXQtcHJvZC5hcWZlci5uZXSCFGRlbW8uYWxsYW50Z3JvdXAu
Y29tghtkZW1vcGluZy5hdXQtcHJvZC5hcWZlci5jb22CHWdyYXBoZHMuYWlvLXBy
ZXByb2QuYXFmZXIubmV0gh9ncmFwaGRzLmM5MDAuYXV0LXByb2QuYXFmZXIubmV0
ghpoMS5jMDU0LmF1dC1wcm9kLmFxZmVyLm5ldIIaaDEuYzkwMS5hdXQtcHJvZC5h
cWZlci5uZXSCFWlkcmVzZ3JhcGguYm13dXNhLmNvbYIaaW1kcy5haW8tcHJlcHJv
ZC5hcWZlci5uZXSCHGltZHMuYzkwMC5hdXQtcHJvZC5hcWZlci5uZXSCHG1hcmtl
dGluZy5hdXQtcHJvZC5hcWZlci5jb22CEm1ldHJpY3MuYWN4aW9tLmNvbYIWbWV0
cmljcy5hY3hpb21kZW1vLmNvbYITbWV0cmljcy5nb3J2aW5nLmNvbYIebWV0cmlj
cy5pbmZ1c2VkaW5ub3ZhdGlvbnMuY29tghptZXRyaWNzLmpvaG5zdG9ubXVycGh5
LmNvbYIUbWV0cmljcy5teWFjeGlvbS5jb22CE21ldHJpY3MucG9sYXJpcy5jb22C
D3B4LjE4MGJ5dHdvLmNvbYIPcHguYW50ZXJpYWQuY29tgg9weC5tZXJpdGIyYi5j
b22CDXB4Lm5ld3BpZy5jb22CEHB4ZHJvcC5saWppdC5jb22CPHJhcGlkZGVtby51
cy1lYXN0LTEuYS5hcHBkZXYuY2xpZW50MDEucmVhbGlkLmFjeGlvbS5zZXJ2aWNl
c4IVcm91dGluZy5haXByb3hpZXMuY29tghdydGFnLmJyZWFkZmluYW5jaWFsLmNv
bYIRcnRhZy5jb21lbml0eS5uZXSCD3QuYWlwcm94aWVzLmNvbYIadC5kZWNpZGVy
LXByZXByb2QuYWxsZXkud3OCDXQuZGVjaWRlci5jb22CGXQubnlwb3N0LXByZXBy
b2QuYWxsZXkud3OCDHQubnlwb3N0LmNvbYIadC5wYWdlc2l4LXByZXByb2QuYWxs
ZXkud3OCDXQucGFnZXNpeC5jb22CEnQucmV0YWlsLmFxZmVyLmNvbYIQdDEuYWlw
cm94aWVzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB3ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABit/m
meQAAAQDAEgwRgIhAKl6Zhxn3lliqXUOSOHSlpNG6Of9MF8RDgSegozsW0vTAiEA
oq5kB4Gie/sRHPwVedz6bRe2E36iZNcI+NCN0G4k79oAdQCt9776fP8QyIudPZwe
PhhqtGcpXc+xDCTKhYY069yCigAAAYrf5pokAAAEAwBGMEQCIFHoEMLYkyTrYS4M
Uir51wfVMKQ8d+30hUs7Eba3n36mAiB9iq4MXRCkslhMreFbYGG2RRELYODL+eWl
fjsBrg2taTANBgkqhkiG9w0BAQsFAAOCAQEANherIM+IPohGxCbBGWSDZ8k67vo0
I9Ih9ZXVIJAX0/2b7bENQ+gPOLsSn67B4KaAFJylsUN1UOl3wA6/aYD8gzwT3gUU
uotTtQ65tkqV3ALyOu3hBYono6xLYhVm2woPcdRh8/OvontNMgq8BkuOn4mruHZ4
tpdKU8m+Y5twSB7/ETMXjxZbvrNzh0qQXGTjBwfD4PAT2pjwTNARun8suygGwLWD
RfTB6rawB/DjgH3B0fVPnW553wOB6hCzB5gP2uTPflxobdoRo+tQOZbvpPkMZ8rN
V4MG4z9Y1YKpVjZwyVHd5zEHe6dl+JJ67AzE/PR7ZIMQJ5yjn2YQhspufw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDGnDDgmfqS2KDQ7vGFe
ZbYDdmVMkJoQ2LT6tQI5Bb5tEkETys/TKzwde7Iq2sWPZXlR14OhTOki2p31sFHj
hPir5jYa2+xC1ApiAn4cTUEIVXhJkXiolY6uSYcpsA3JBZrngrPWyBIZWqCOHNp/
mLAwQ/yNLoeXWDMa726M3dNu9sXpxG531mDpvlK3rikrKCSBlLUSihmqBVuPH8Ho
NKjbDeKbvaMHDtytEqkGw20Arxdvglf3/H+lcD23Bzak/nYNmhM3aEP/aORNTM11
Rxt6sUyxKIR55yEYDB/KbU6H7FJRvp15yZ5gKVMdWC5333hHFwWCzbtT9RDH0klY
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403027302274020798941729698490796506537234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 06:45:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 06:45:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2-prod.aut.a24365.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24262239128678620021802844893128882971433162223119903127171099247925471827228583622704449176130124046280769918774929207007659802700543655914836030703310991205371263879716648451781759136794077820680191174679892923583274004693420902925753772516454794171499515482632417955420193102926537243142914719041327104423321057684897898951458032296079366301992504053706602698744474269955484307945977406448325217378274720406943189400285363363550347862068104991275861572667676095254994851733996757473744090745962997652355748997539472584988228651482424762362461497633057562539143909507265913024573960026055753033889188423577906010243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							929748ed617382d06349a3a9e53979dc1e78c9cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1425 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.rdata.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.rgraph360.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c045.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c066.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c067.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2-prod.aut.a24365.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsync.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c054.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.breadfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.comenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.retail.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adfe699e40000040300483046022100a97a661c67de5962a9750e48e1d2969346e8e7fd305f110e049e828cec5b4bd3022100a2ae640781a27bfb111cfc1579dcfa6d17b6137ea264d708f8d08dd06e24efda007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018adfe69a240000040300463044022051e810c2d89324eb612e0c522af9d707d530a43c77edf4854b3b11b6b79f7ea602207d8aae0c5d10a4b2584cade15b6061b645110b60e0cbf9e5a57e3b01ae0dad69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003617ab20cf883e8846c426c119648367c93aeefa3423d221f595d5209017d3fd9bedb10d43e80f38bb129faec1e0a680149ca5b1437550e977c00ebf6980fc833c13de0514ba8b53b50eb9b64a95dc02f23aede1058a27a3ac4b621566db0a0f71d461f3f3afa27b4d320abc064b8e9f89abb87678b6974a53c9be639b70481eff1133178f165bbeb373874a905c64e30707c3e0f013da98f04cd011ba7f2cbb2806c0b58345f4c1eab6b007f0e3807dc1d1f54f9d6e79df0381ea10b307980fdae4cf7e5c686dda11a3eb503996efa4f90c67cacd578306e33f58d582a9563670c951dde731077ba765f8927aec0cc4fcf47b648310279ca39f661086ca6e7f