san3206.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4c:92:af:bc:9f:f0:f6:de:76:39:ea:28:44:96:20:23:06 was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san3206.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:92:af:bc:9f:f0:f6:de:76:39:ea:28:44:96:20:23:06
Serial Number (int): 374505583378132009296928082427369949766406
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:b9:ba:c4:c6:bc:80:e4:fd:74:6c:57:0f:4a:02:b7:e2:2e:f7:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:e6:0b:56:56:d4:e6:68:12:18:ab:ee:09:59:d7:8a:eb:5e:8b:02
Fingerprint (sha256): 2a:49:e2:0c:f6:9b:28:77:98:ec:c5:92:61:1d:b0:12:87:2d:03:45:91:bb:8d:9d:00:73:e7:db:18:99:bb:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san3206.cdntwrk.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3206.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

advsyscon.ufcontent.com
alphahq.ufcontent.com
am.ufcontent.com
anz-resources.awscloud.com
api2-group4.relevantize.com
asean-resources.awscloud.com
autocadresources.autodesk.com
axiomsl.ufcontent.com
bannerflow.ufcontent.com
biotech.parexel.com
blucore.ufcontent.com
boldly.jouleamc.ca
boldly.joulecma.ca
bombbomb.ufcontent.com
brandmuscle.ufcontent.com
braze.ufcontent.com
callrail.ufcontent.com
canucks.ufcontent.com
ceros.ufcontent.com
cisive.ufcontent.com
confluent.ufcontent.com
confluent2.ufcontent.com
core-group1.relevantize.com
core-group2.relevantize.com
core-group3.relevantize.com
core-group4.relevantize.com
cybergrx.ufcontent.com
dstillery.ufcontent.com
edlio.ufcontent.com
emea-resources.awscloud.com
enterprise-resources.awscloud.com
explore.volarisgroup.com
healthx.ufcontent.com
hub.hms.com
icertis.ufcontent.com
imagineit.ufcontent.com
impact.ufcontent.com
in-resources.awscloud.com
insights.oneneck.com
jobdiva.ufcontent.com
kjdemo.ufcontent.com
kr-resources.awscloud.com
leadingagile.ufcontent.com
llr.ufcontent.com
loctame.ufcontent.com
lultra.ufcontent.com
magaya.ufcontent.com
mapanything.ufcontent.com
mimeo.ufcontent.com
movableink.ufcontent.com
my.gonimbly.com
npoch.ufcontent.com
omc.ufcontent.com
partsource.ufcontent.com
pdmresources.autodesk.com
persado.ufcontent.com
phreesia.ufcontent.com
piano.ufcontent.com
pocada.ufcontent.com
provationmedical.ufcontent.com
purchasingpower.ufcontent.com
pythian.ufcontent.com
rangle.ufcontent.com
rapidratings.ufcontent.com
rctest.ufcontent.com
remcom.ufcontent.com
resft.relevantize.com
resources.copperleaf.com
resources.copperleafgroup.com
resources.jamasoftware.com
resources.nanotempertech.com
resources.observepoint.com
resources.piano.io
resources.securitycompass.com
resources.viewpoint.com
salesloft.ufcontent.com
san3206.cdntwrk.com
seegrid.ufcontent.com
sevencorners.ufcontent.com
sisense.ufcontent.com
turbonomic.ufcontent.com
twiggle.ufcontent.com
uberflip.bci.ca
uberflip.dcm10.com
visiblealpha.ufcontent.com
wardsworld.wardsci.com
watermark.ufcontent.com
wivany.ufcontent.com
worldaware.ufcontent.com
wsps.ufcontent.com
www.finelinesmagazine.com
xenial.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san3206.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnGVPMmtGrp21To6bboD
FU0LZtC4ixEGq4tjffKp+qgoo44QyIn3HMDXpaDGv7QU/89tYltVgAn0HAP0XQmd
WA7O75tyUFLEIqnAjWR+Yk0JuDA6REOVeepSRyBeE/6eSR/3IKOgJOvipYmyew4G
K0C1hk+UmNc2DT911IDLnu7+mebDvE54uD5mBOgF9tzR9H/kzOdOAq9xiV+C2oVN
88lHTI+RCgy9T8kDMeocpEn5u6TZqhjZ2z1oNd6i1kw6FqQHH5AwF6DdEC1HN5Sl
wJEberkSEwFtJ04Qe0rCgg1jH1pMNQf9Ri+B4Z+YAiI+lG9xrx/l/2IvV0sSHdtE
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374505583378132009296928082427369949766406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-04 15:03:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-02 15:03:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san3206.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22021474908593075625979726690699426192919923183977381885723010978868944988158711756270487247925411928485814152376472692211247420484600112649256582815668687797063943392855836143297748722365963014144788452634562834653950647143405291520439430630537821201790782671227633007975696653959496253784828481834914191530740269359508658125686028780048228120926636829727943010004711702106969900086037312301864051941038672998956114742535006671834783943760915244122919557381125852834512088134238312178586508378576687542710371308091847031880987530404449939098406117719383719244585330081355400634003247934786298159690298526041753994399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4b9bac4c6bc80e4fd746c570f4a02b7e22ef76f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advsyscon.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphahq.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anz-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2-group4.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asean-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocadresources.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axiomsl.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerflow.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotech.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blucore.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldly.jouleamc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldly.joulecma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bombbomb.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandmuscle.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braze.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callrail.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canucks.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceros.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisive.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluent2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group1.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group3.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group4.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybergrx.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dstillery.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edlio.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.volarisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthx.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.hms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icertis.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imagineit.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.oneneck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobdiva.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadingagile.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loctame.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lultra.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magaya.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapanything.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimeo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movableink.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gonimbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npoch.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omc.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partsource.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdmresources.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persado.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phreesia.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piano.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocada.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provationmedical.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasingpower.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pythian.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangle.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidratings.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rctest.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remcom.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resft.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.copperleaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.copperleafgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.jamasoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nanotempertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.observepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.piano.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.securitycompass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.viewpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesloft.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3206.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seegrid.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevencorners.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sisense.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbonomic.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twiggle.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberflip.bci.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberflip.dcm10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visiblealpha.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wardsworld.wardsci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermark.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wivany.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldaware.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsps.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finelinesmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenial.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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