USDGR0LYCPOOL01.aramarkuc.net

- ARAMARK -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 97:11:bd:9f:68:c1:36:6b:00:00:00:00:50:f9:b6:57 was issued on by Entrust, Inc..

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARAMARK

Organization: ARAMARK
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 97:11:bd:9f:68:c1:36:6b:00:00:00:00:50:f9:b6:57
Serial Number (int): 200805542415230339498096889371127559767
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:52:02:ac:07:34:f8:2d:99:f8:3a:de:7e:a6:47:85:02:46:ad:2b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8a:00:55:59:67:b5:ec:6a:80:aa:8d:42:8a:10:75:d7:f5:66:6d:71
Fingerprint (sha256): 2d:bb:25:49:d9:d9:36:21:cd:48:26:a5:d5:03:9f:e7:7a:39:5d:34:7e:05:16:6c:19:43:39:74:b0:b8:ca:7e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate USDGR0LYCPOOL01.aramarkuc.net

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for USDGR0LYCPOOL01.aramarkuc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

USDGR0LYCPOOL01.aramarkuc.net
sip.1st-fresh.com
sip.aramark.be
sip.aramark.cl
sip.aramark.ca
sip.aramark.co.uk
sip.aramark.ie
sip.aramark.com
sip.aramark.cn
sip.aramark.com.ar
sip.aramark.es
sip.ipsrebates.com
sip.hpsionline.com
sip.westernfirstaid.com
sip.avendra.com
sip.ameripride.com
sip.canadianlinen.com
sip.aramark.lu
sip.aramark.de
sip.aramark.fr
sip.avoca.com
sip.Lifeworksrestaurantgroup.com
sip.harvesttableculinary.com
USDGR0LYC20.fss.aramark.com
lync.aramark.net
meet.ipsrebates.com
meet.hpsionline.com
meet.westernfirstaid.com
meet.avendra.com
meet.ameripride.com
meet.canadianlinen.com
meet.aramark.lu
meet.aramark.de
meet.aramark.fr
meet.avoca.com
meet.lifeworksrestaurantgroup.com
meet.harvesttableculinary.com
DGRLSWEB.aramarkuc.net
LyncdiscoverInternal.1st-fresh.com
LyncdiscoverInternal.aramark.be
LyncdiscoverInternal.aramark.cl
LyncdiscoverInternal.aramark.ca
LyncdiscoverInternal.aramark.co.uk
LyncdiscoverInternal.aramark.ie
LyncdiscoverInternal.aramark.com
LyncdiscoverInternal.aramark.cn
LyncdiscoverInternal.aramark.com.ar
LyncdiscoverInternal.aramark.es
LyncdiscoverInternal.ipsrebates.com
LyncdiscoverInternal.hpsionline.com
LyncdiscoverInternal.westernfirstaid.com
LyncdiscoverInternal.avendra.com
LyncdiscoverInternal.ameripride.com
LyncdiscoverInternal.canadianlinen.com
LyncdiscoverInternal.aramark.lu
LyncdiscoverInternal.aramark.de
LyncdiscoverInternal.aramark.fr
LyncdiscoverInternal.avoca.com
LyncdiscoverInternal.Lifeworksrestaurantgroup.com
LyncdiscoverInternal.harvesttableculinary.com
DGRLSWEBEXT.aramarkuc.net
Lyncdiscover.1st-fresh.com
Lyncdiscover.aramark.be
Lyncdiscover.aramark.cl
Lyncdiscover.aramark.ca
Lyncdiscover.aramark.co.uk
Lyncdiscover.aramark.ie
Lyncdiscover.aramark.com
Lyncdiscover.aramark.cn
Lyncdiscover.aramark.com.ar
Lyncdiscover.aramark.es
Lyncdiscover.ipsrebates.com
Lyncdiscover.hpsionline.com
Lyncdiscover.westernfirstaid.com
Lyncdiscover.avendra.com
Lyncdiscover.ameripride.com
Lyncdiscover.canadianlinen.com
Lyncdiscover.aramark.lu
Lyncdiscover.aramark.de
Lyncdiscover.aramark.fr
Lyncdiscover.avoca.com
Lyncdiscover.Lifeworksrestaurantgroup.com
Lyncdiscover.harvesttableculinary.com
USDGR0LYC23.fss.aramark.com
USDGR0LYC22.fss.aramark.com
USDGR0LYC21.fss.aramark.com
USDGR0LYC24.fss.aramark.com

Other certificates including the domain name aramarkuc.net

(limited to 100 certificates)
dgrowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCEDGE01.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
phlowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USDGR0LYCMED01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCEDGE01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
dgrowas.aramarkuc.net
webmail.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net

Certificate

The complete raw certificate details for USDGR0LYCPOOL01.aramarkuc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9lpknawE1FHmL76Qh2h
ZkSQXFyXoSxv1ttioBgJx2trGGNWN1tSEUhyNKHGkx3YECHXR9u9mb3kEC0dwvp4
ypk4oIy1c7x+gSfo56FUiECI40+Ab9rS3CIRczGKF/M+zQCXM20zRgPtdhttRbhY
0EqtOcN4BuTmocTP6Um053TWsIhSn9mgOQxtOca2ze2pY251sVf4iXWodJJtN306
4XQbHD3uZQJ2Qkt7DJAECAYAhSqs+n1bUu074Hpyc35rnx1IFMkWyOf4ggONYfst
GkkWtawOIJdV5rulCpdxgnUakU9uDfJWhaBueR2keHidlf3BZSUsAGcXhF9SvVMn
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200805542415230339498096889371127559767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 14:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 15:11:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USDGR0LYCPOOL01.aramarkuc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24723679514209691210425333432392799912472136875254840461213626214886893304541574657589048642256602562049858955315488667684337740997676616582964299252476751089673964632584698327579431971226864313787952137703129345792679880904075507022493015912898127122868823402619711475627250402093190956553514683476281351582268751613091522258718651100424655050650207360697268320746337595339688346106211009219163294181356748040786318089041628768161943430457801332354554593199009024968631917410756650607432964498712321307898791472476147174849229843621262539863825297182114091664574732868658795130951106268940445571518298959353658681167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYCPOOL01.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC20.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.aramark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DGRLSWEB.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DGRLSWEBEXT.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC23.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC22.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC21.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC24.fss.aramark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc5202ac0734f82d99f83ade7ea647850246ad2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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