content.aimatch.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:0f:38:4d:d4:4a:62:8b:0f:f4:a6:6f:6e:e5:74:38:c9 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content.aimatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:0f:38:4d:d4:4a:62:8b:0f:f4:a6:6f:6e:e5:74:38:c9
Serial Number (int): 321246785140491692154229419392102057654473
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:6f:fd:ed:cb:d6:55:5f:8c:5e:ef:1b:41:b8:f9:8c:11:b6:71:1a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:de:41:23:e3:56:4f:d4:14:59:46:e3:e7:74:bb:f8:70:62:9c:e9
Fingerprint (sha256): 29:68:61:71:93:ce:f7:f7:f5:69:10:81:93:3e:51:f8:0e:cc:72:49:75:04:ff:c9:af:8e:dc:23:97:64:4f:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate content.aimatch.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content.aimatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canary-content.360match.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.at
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicc1ust.cxtrvl.com
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.csob.sk
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.infosquaregroup.com
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.stoloto.ru
content-ci360.telia.ee
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.24.hu
content.aimatch.com
content.dna360.scholastic.com
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
usincm-content.mktg.sas.com

Other certificates including the domain name aimatch.com

(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com

Certificate

The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnoDrNDZ5z1V9SEk3db
zVmrlxkuRmznBZTVAULpKMNnqcyzHlPIKA3gzzvQmI/sjcxiiG/5q3SJaYUI7bcK
aseaStayO8hCQaclB48TlnA1FJOzM3GZDXiSZWRAqvV2XHinJ3n5D5KkXTKMD4mt
qMxAwiKJ1DewJIK8FqtJFqMIEygxxF525F1MUMx7yBUpYB+tc5iwZL9OrDegRS7m
ICSn8MWe3XHga+xLR/XENpGSiQSr+x7l7plcwROHUoUeVyD+E5bYDocoIil82wzo
pu0t6BrmBHyeKLdI+4URwJIKMEhIUscaSrPUJ0IGdFdnBBEZhVEKHPnX/f0SSvmQ
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321246785140491692154229419392102057654473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-03 02:26:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-04 02:26:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23248512966425654045542666259271434606456332129075747481037933333894107352519559804943300766379425456586873559420405115806819689405778389646411236304372030823911287273667493460524951883755514381983541020813386020939566492605622048039698819783891850778236203703741363109546832316184812409692339077855875670026415254182575874258443826800322714156927404511703370515456973840611324906201459016098204945881706144574563879270637226300589519673253903029844238197405077049487887521216878205933411448810444256001428763544981302707954540270826213242864030390807391127572689059001240246771535138127911001586655022933907449942241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb6ffdedcbd6555f8c5eef1b41b8f98c11b6711a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1629 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-content.360match.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicntn.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc1ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.csob.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.idaten.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.infosquaregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.paulfredrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.stoloto.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.telia.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.24.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dna360.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.odt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscontent.morningstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticcontent.mycwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-content.mktg.sas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002128c8cf04178b68ef3c9f205c75891d9eb51ff439b4a61f1838a529539e10b05b9455fabad59c15048fce1899521ea7b49f58d53d0bb22ff28b92646dc510816f75f33ba19bd511760280699837e51f6ac2b74c2bf5006a457d914d671142afcea33c9146f81ecb442ab92fcd7b80bdc3fb89614734c99af04c600c2b7c40d1570b0474d0759d5a5ce9b2ef43565de78d0db0a86ab9e45355bed2182829821ca551dc4c1fd46d5acdba46f5af9c8c519fc5319c078aa7236f75d13987c7e1a238c8dcb1f815c9c98fb33b831c57c9372ca1e9daf26b619ebb623359dff5596040b975000ebedbdc3e86b6f3b95e4aad6891b7f5fa8f82cb94385d6dc2923b60