locations.yext.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bf:52:aa:ca:db:b8:8c:7f:dc:dd:31:70:a6:21:ea:57:2b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=locations.yext.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bf:52:aa:ca:db:b8:8c:7f:dc:dd:31:70:a6:21:ea:57:2b
Serial Number (int): 413552959309515369753773065169054156347179
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2c:df:80:2e:8f:ff:4e:1e:8f:ec:0b:04:6a:7e:e9:f4:2d:56:2e:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:a9:53:22:bb:11:60:0e:b7:84:0b:44:f1:30:3f:ab:96:5b:ba:32
Fingerprint (sha256): 33:68:fa:c9:6c:54:a8:36:a5:93:84:15:bd:66:96:19:74:83:b7:6a:62:a3:6d:8c:6c:32:03:b8:f0:be:e5:81

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate locations.yext.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for locations.yext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agents.wfgcanada.ca
answers-apcu.pagescdn.com
answers-brixxpizza.pagescdn.com
answers-campbells-brand.pagescdn.com
answers-campbells-canada.pagescdn.com
answers-churchhillmortgage.pagescdn.com
answers-domain.pagescdn.com
answers-girl-scouts.pagescdn.com
answers-hospitality.yext-cdn.com
answers-pacificsmilesdental.pagescdn.com
answers-physiciansmutual.pagescdn.com
answers-r2integrated.pagescdn.com
answers-sam-templatedomain.pagescdn.com
answers-totalwireless.pagescdn.com
answers-wauchulastatebank.pagescdn.com
answers.bytefederal.com
answers.dignityfunerals.yext-cdn.com
answers.heritagebanknw.com
answers.jessieshop.org.pagescdn.com
answers.nexgenhearing.com
answers.onward19.com
answers.shopdev2.tupperware.com
answers.three.co.uk
appt.myeyedr.com
ca-stores.casper.com
cafe.haagendazs.com.mx.yext-cdn.com
clinicians.nexgenhearing.com
covid19.nj.gov
davenporthiring.portillos.com
directory.monument.health
ekir-answers.pagescdn.com
events.albuquerquedentistoffice.com
events.donorschoose.org
events.mykidsdentistwestjordan.com
experts.yext.com
hitchhikerblog-answers.pagescdn.com
homes.funeralcare.co.uk
kr-stores.iqos.com.yext-cdn.com
l.autozone.com.mx
libertymutual-answers.pagescdn.com
lo.citizensone.com
local.jewelosco.com
local.luckylowprices.com
local.pharmacy.jewelosco.com
local.pharmacy.luckylowprices.com
local.starmarket.com
local.tomthumb.com
locations.banksouth.com
locations.cariboucoffee.com
locations.cititrends.com
locations.epicwingsnthings.com
locations.frostbank.com
locations.hydradynellc.com
locations.judge.com
locations.membersheritage.org
locations.papajohns.com
locations.pilotflyingj.com
locations.qdoba.com
locations.sabb.com
locations.shoneys.com
locations.snbconnect.com
locations.tccrocks.com
locations.tiaa.org
locations.tonyromas.com
locations.wesbanco.com
locations.yext.com
mlo.silvertonmortgage.com
restaurants.fiveguys.ae
restaurants.fiveguys.be
restaurants.gbk.co.uk
retailers.jaguar.co.jp
retailers.jaguar.tw
retailers.jaguarbrasil.com.br
retailers.jaguarmexico.com.mx
retailers.landrover.co.nz
retailers.landrover.in
sklepy.geers.pl
springfieldclinic-answers.pagescdn.com
storefinder.carpetright.co.uk.yext-cdn.com
stores-de.iqos.com
stores.academy.com
stores.cictitlepawn.com
stores.footlocker.co.uk
stores.footlocker.com
stores.footlocker.de
stores.footlocker.dk
stores.footlocker.es
stores.giantfoodstores.com
stores.jared.com
stores.kourakuen.co.jp
stores.ladyfootlocker.com
stores.marugame-seimen.com
stores.sportsmans.com
stores.tenasa.jp
stores.tenpura-tensei.jp
stores.thesouthernco-operative.co.uk
stores.worldmarket.com
trust.ccbg.com
visit.brewersat4001yancey.com
www.burgergemeindezermatt.ch

Other certificates including the domain name yext.com

(limited to 100 certificates)
agent-qa.travelers.com
dev2.streamflow.finance
sni.cloudflaressl.com
covid19.yext.com
faqs.yext.com
sni.cloudflaressl.com
grow.yext.com
*.tx1.yext.com
*.yext.com
covid19-gov.yext.com
*.yext.com
techops.yext.com
blog.catalog.fi
sni.cloudflaressl.com
app-qa.eu.yext.com
answers-texaneyecare.pagescdn.com
sni.cloudflaressl.com
news.yext.com
*.yext.com
onward.yext.com
start.yext.com
*.yext.com
events.biggestfantour.com
wiki.yext.com
sni.cloudflaressl.com
offers.yext.com
*.yext.com
covid19.yext.com
covid19-healthcare.yext.com
*.yext.com
for.yext.com
san1.yext-cdn.com
embed-answers.cority.com.pagescdn.com
yext.com
store.yext.com
start.yext.com
locations.yext.com
*.hitchhikers.dev
*.thefrabric.com
design-system.yext.com
cac-documentation.hitchhikers.yext.com
docker.jfrog-poc.office.yext.com
news.yext.com
answers-autozone.pagescdn.com
news.yext.com
sni.cloudflaressl.com
livepreviewwebsockets-qa.yext.com
events.biggestfantour.com
ssl910335.cloudflaressl.com
answers.romeospizza.com
grow.yext.com
help.yext.com
sni.cloudflaressl.com
*.interview.yext.com
*.interview.yext.com
help.yext.com
sustainability.yext.com
api.eu.yext.com
bvas.yext.com
publishers.yext.com
start.yext.com
mulesoft.farmers.yext.com
sni.cloudflaressl.com
design-system.yext.com
sni.cloudflaressl.com
*.youst.in
hitchhiker-answers.yext.com
cube.yext.com
sni.cloudflaressl.com
*.office.yext.com
physicians.florida-allergy.com
*.yext.com
plfeeds.eu.yext.com
app.eu.yext.com
*.yext.com
sni.cloudflaressl.com
help.yext.com
*.hitchhikers.dev
blog-hitchhikers.yext.com
answers-embed.reseau-stan.com.pagescdn.com
sni.cloudflaressl.com
san1.yext-cdn.com
design-system.yext.com
www.yext.com
*.hitchhikers.dev
search.yext.com
wiki.yext.com
sni.cloudflaressl.com
sni.cloudflaressl.com
amp.locations.yext.com
yext.com
ssl468786.cloudflaressl.com
*.office.yext.com
*.office.yext.com
*.yext.com
www.start.yext.com
wiki.yext.com
sni.cloudflaressl.com
app.eu.yext.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for locations.yext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xCOKQVE0j63pkWSVkBr
BAtI6uLUTQdwcirZyqt5g8dTtofXmxVhXUpxsIbrtjhUYYzFMCchwELwHwLj5k0Q
xeRs3tCccX4bRODsbsOZ+LMGOb5TYHg5XetxnpE5xXhKNOXVzwugXGSI6W6bj5HL
AEiEyU87SfRDhR2zX9NYomIFh6N0aY44QJ1Z+dYI8fy4+uBlmXMDWj8UEq69srE+
H2WowhcgXevCLXt59EE4facTPJx35JjBJ1+ePEcuBScQ/RM0gxQx/fHbroQwGrpm
xGeMQJ/qwygO4NH+crMqomTJKQNEGhMhB2/STvaHgU4QpkTcVPhkb/A4eQV/ECpC
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413552959309515369753773065169054156347179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-24 18:35:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 18:35:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'locations.yext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27149399297018533086452208280854066175683058983965740065044780127143064922733230118779058802560073028157886545419428012912534726605854628554319758548047028079813922184935687128960507157461136020257568086818964171246886743215132093225612417540156059613306961485254142541662070467910796983140883688777884105595292367244310817806705486539297982111984307143057946567547302617922450833168292313286592245996985401361153857489183756591430797724808753929539960711331505728823002350667804852731964468932330298063497742986060147030036205224216985248544427045849595947802437506332603089234606636598483511337986557856924048179899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cdf802e8fff4e1e8fec0b046a7ee9f42d562e99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.wfgcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-apcu.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-brixxpizza.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-campbells-brand.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-campbells-canada.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-churchhillmortgage.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-domain.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-girl-scouts.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-hospitality.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-pacificsmilesdental.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-physiciansmutual.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-r2integrated.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-sam-templatedomain.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-totalwireless.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers-wauchulastatebank.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.bytefederal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.dignityfunerals.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.heritagebanknw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.jessieshop.org.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.nexgenhearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.onward19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.shopdev2.tupperware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.three.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appt.myeyedr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-stores.casper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafe.haagendazs.com.mx.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicians.nexgenhearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davenporthiring.portillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.monument.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekir-answers.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.albuquerquedentistoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.mykidsdentistwestjordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitchhikerblog-answers.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homes.funeralcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr-stores.iqos.com.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l.autozone.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual-answers.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lo.citizensone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.pharmacy.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.banksouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cariboucoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.cititrends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.epicwingsnthings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.frostbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.hydradynellc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.judge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.membersheritage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.papajohns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.pilotflyingj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.qdoba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.sabb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.shoneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.snbconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tccrocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tiaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.tonyromas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.wesbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations.yext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlo.silvertonmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.fiveguys.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.fiveguys.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurants.gbk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguar.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguar.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguarbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.jaguarmexico.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailers.landrover.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklepy.geers.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springfieldclinic-answers.pagescdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storefinder.carpetright.co.uk.yext-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores-de.iqos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.cictitlepawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.giantfoodstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.jared.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.kourakuen.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.ladyfootlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.marugame-seimen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.sportsmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.tenasa.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.tenpura-tensei.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.thesouthernco-operative.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.worldmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.ccbg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.brewersat4001yancey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burgergemeindezermatt.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000173825307b9000004030047304502201c396cdc43dd18b642ea4bf0a8b7083b19fb92e27c8f9d064a28d6b50468078a02210097a0861edfd5e138ce4d0ed48a5abfdb3ea2d270594d3bc0cc631117a2f06ab70077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001738253080f0000040300483046022100ab5ee4a2772fab9dbf614649a7e734877379ff2adac4fed0104ad5b55fc09c6902210093fcd359f38687e0d94e4eaf1828607512f005680b865e3e1e10ba7ede2cbd69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d4af26deb0f8ab4612841884fe31886462157582102b7f7d5a222fdeae73ec7f60c17e894b9940c59acd3b5ef8e9687b9b47878e61394c6f76078117663d1a18970b8ee218d715c97ff8e1c02eb93f795fe4e371b4c352294a15b9ad0fc5d5bec6367b4f7b722e3a168fb7d8d49b2784dd0f4d0aa56de85ca5ea19f768f1324ae3d15577f899a044da7ec5e956ad20a80dfdd2ac4fb19180f827a5c08b9eff29df1f527b70dacd171fa66fc5126c3e9a0eafd86bc52cd3b8fd57ea3d1acc2b7a49091079292a744d81bc75eaab0c2117288d9d09db2c7cc10e5692212ae72fd0c6b2fc281736d5cbe066d61d9f4b1087eba7c5d7e0414c81cb7a6ac67cbc928