www.highq.com

- Thomson Reuters Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 4a:57:c8:4f:c2:96:b6:cd:4e:a3:2a:4f:26:10:b1:50 was issued on by COMODO CA Limited.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Thomson Reuters Corporation

Organization: Thomson Reuters Corporation
State / Province: Ontario
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 4a:57:c8:4f:c2:96:b6:cd:4e:a3:2a:4f:26:10:b1:50
Serial Number (int): 98818664315944167595763309351908979024
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e7:91:d9:d2:74:aa:a1:d9:28:4d:4a:e7:cc:fd:2b:67:0d:90:97:8a
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 09:12:e3:13:16:c9:6e:a8:d4:8c:e6:1e:49:f7:73:ff:55:d2:4d:f3
Fingerprint (sha256): 2c:39:f0:33:81:b0:fe:0f:a6:de:4d:cf:d8:2e:9d:54:df:94:8f:0e:60:a3:85:5e:a7:85:5e:1d:75:80:c4:ed

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.highq.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.highq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.highq.com
adv.gestaovbso.com.br
cdconnect.capdyn.com
cliente.cqsfv.com.br
clientportal.buckles-law.co.uk
clientportal.pickfordsolicitors.com
cms.dehavilland.com
cms.yasa.com
coattorneycm.henrico.us
collaborate.aquabridgelaw.co.uk
collaborate.brownsvilletx.gov
collaborate.chattertons.com
collaborate.foster.com
collaborate.herrick.com
collaborate.lowenstein.com
collaborate.medicaldev.com
collaborate.roschier.com
collaborate.shoosmiths.com
collaborate.ycst.com
connect.weightmans.com
contract.msf.org.au
contracts.patriotgis.com
contratos.clarin.com
corporateseurope.demo.highq.com
cp.wiggin.co.uk
crowell.highqsolutions.com
dataroom.arma-corporate.com
dataroom.emwlaw.com
dataroom.fwp.at
dataroom.mapdgroup.com
dataroom.valeriotx.com
docportal.betwaygroup.com
documents.holmes-hills.co.uk
extranet.kitopi.com
highq.accesscharity.org.uk
highq.aceto.com
highq.amda.com.au
highq.finaccel.co
highq.iicle.com
highq.intigral.net
highq.kensingtonmortgages.co.uk
highq.legalinnovation.ai
highq.mundipharma.com
highq.plesner.com
highq.sunbeltrentals.co.uk
highq.swansea.ac.uk
hub.justclaims.eu
hub.xsysglobal.com
inbmv.highq.com
juridico.endemolshine.com.br
lawq.musanada.com
legal.automotive.ricardo.com
legal.buyersedgeplatform.com
legal.invoxpharma.com
legal.mcd.co.kr
legal.merama.io
legal.procomer.com
legal.razer.com
legalhub.alefeducation.com
legalhub.ultimatefinance.co.uk
legalops.propertyguru.com
legalservices.akc.org
legalservices.gccservices.com
legaltool.arcelormittal.com
lsc.emaar.com
my.walderwyss.com
pca.pcajur.highq.com
platform.nai-nl.org
portal.camcom.it
portal.connect.cliffordchance.com
portal.howmansolicitors.co.uk
portaljuridico.sotreq.com.br
saga.fondia.com
testinstance.together.noerr.com
together.noerr.com
vdr.holst-law.com
vdr.howardkennedy.com
vdr.jobsons.law
www.pathfinderdiageo.com

Other certificates including the domain name highq.com

(limited to 100 certificates)
cwp.status.symantec.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
andrei.sterda.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thomsonreuters.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ccd.status.symantec.com

www.highq.com
cc3.status.jasper.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
www.highq.com
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
thomsonreuters.com
api-status.360cities.net
www.highq.com
www.highq.com
cc3.status.jasper.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

*.hqdev.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
offers.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
highq.com
offers.highq.com
cwp.status.symantec.com
www.highq.com
www.highq.com
www.highq.com
eboks-status.reepay.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
www.highq.com
support2.cdnetworks.net
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.highq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLoirT/J6ojEe7sm2uAU
PXITRPJDiazHMvq6jhUPHS/xn961qrCLeXWsgjXEVMaeL12jp2DLbrofxbad43Os
+f6MW+RKIFtrdcJwFNSek40QfbXAZiy+rssx1Br1CoRiexSOtn7JhLU2sg6up0jU
JqGTCjuXO4CgQ3XqFl8B9KhRMhUwZ5pkqCRt7APyVRRR5FbNszdZdoAzFEfKL/MC
IiIrSy8mEG8Vh4+7QCaFPRGCh1L2xikZ+umYJvZJTFsTwMKSJYTeIPaq3DAMbXVu
WpCpHBYfTj3TnjeZ+wTOqqr4nha4Rix7KD+NLKVAuo8dn2CQTerZlMiUkZ4iiZHa
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98818664315944167595763309351908979024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thomson Reuters Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21299822048628672331694338943431319154080142997714504957087491607883517612202073284956994634432749974616256481334923515635257623298037263640909010546147286763496191316781805893074505366189400322771990065513780431212173964580255637545114460906952051551431039240014450503548129374466534453437223989517920054223616804411549355800947178833295246664083348824326807975388521496998797051114759890391884847783566830136494129340130518713513227281671839021632190123299158061987329264321591186479461787698871136152763008235317959917319956620709753100444804692853067965428078978352248418480613128412834301481980110963251807902243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e791d9d274aaa1d9284d4ae7ccfd2b670d90978a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.gestaovbso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdconnect.capdyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliente.cqsfv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.buckles-law.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.pickfordsolicitors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dehavilland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.yasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coattorneycm.henrico.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.aquabridgelaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.brownsvilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.chattertons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.foster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.herrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.lowenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.medicaldev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.roschier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.shoosmiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.ycst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.weightmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contract.msf.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracts.patriotgis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratos.clarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateseurope.demo.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.wiggin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowell.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.arma-corporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.emwlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.fwp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.mapdgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.valeriotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docportal.betwaygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.holmes-hills.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.kitopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.accesscharity.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.aceto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.amda.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.finaccel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.iicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.intigral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.kensingtonmortgages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.legalinnovation.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.mundipharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.plesner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.sunbeltrentals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.swansea.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.justclaims.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.xsysglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbmv.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juridico.endemolshine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawq.musanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.automotive.ricardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.buyersedgeplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.invoxpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.mcd.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.merama.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.procomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.razer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhub.alefeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhub.ultimatefinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalops.propertyguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalservices.akc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalservices.gccservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaltool.arcelormittal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsc.emaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.walderwyss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pca.pcajur.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.nai-nl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.camcom.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.connect.cliffordchance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.howmansolicitors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaljuridico.sotreq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saga.fondia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testinstance.together.noerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.noerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.holst-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.howardkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.jobsons.law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathfinderdiageo.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f66a75e88417205af9fea77e80516e9bcd2109cf649daa1a0aff55a7d71c47a85c08acfab78cff07ba2e938cc9a22054a9065d840b070b4ac5a32ed547b799ffded8e924034c583ba820f016bba106491981b93ed6f8fbff055353099b50d6a93159910e5a3a9b5bf10bb976cf9a870d3667685ab834bab3e5943fa75bafde5b2b8b3ec42b5c4740dcfb51afdeaa45cd28bb72efec8cef034fe9cd8a51782e47f3bae0ddeaf7c6a40dac69c0d2882b9e512396f0f6cb8f707cc6df0c2ff63ae2154b5f4d5ffce077ce3ae640957ac3be456355d0a9e919dbbd46a8d4fe7b842be58142cbb6611e5eb9f721ac9b46f20a245defd20e7a7bd59ef980b1aa3b031