cert2-prod.aut.a24365.net

Issued by R3

About this certificate

This digital certificate with serial number 03:be:4f:54:d9:4b:7f:88:6d:36:e1:0a:43:6d:3d:34:84:24 was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert2-prod.aut.a24365.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:4f:54:d9:4b:7f:88:6d:36:e1:0a:43:6d:3d:34:84:24
Serial Number (int): 326095957082126638984284443628769283179556
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:b5:8c:3e:74:9f:52:91:fa:9d:22:e6:ff:08:0b:24:77:8b:1a:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:3b:ee:a8:cc:d6:82:48:21:f3:4a:15:7e:dc:94:5c:00:9e:df:87
Fingerprint (sha256): 34:9f:8d:35:ef:1b:8b:62:cc:92:c4:cc:b0:b1:e8:24:64:df:d4:55:af:5c:1d:32:42:51:27:d1:73:c9:96:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert2-prod.aut.a24365.net

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert2-prod.aut.a24365.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c050.aqfer.net
c066.aut-prod.aqfer.net
c067.aut-prod.aqfer.net
c900.aut-prod.aqfer.com
c900.aut-prod.aqfer.net
c901.aut-prod.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aut-prod.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
h1.c026.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
maxt.umzu.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.nypost-preprod.alley.ws
t.nypost.com
t.onclive.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.retail.aqfer.com
t1.aiproxies.com

Other certificates including the domain name a24365.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net

Certificate

The complete raw certificate details for cert2-prod.aut.a24365.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSgQIEOtGSzjHp62AUZm
Xq4b/qzLNM71Rp3itbJcPSIMukZWwN/dcOeYNRztHqPxwkOQnY+tncnh/zmzC3MK
fVpmr74hsGJcMeGxSgx+jaLrWHbA/n6ZkRlSnwGHS+Nv+663XMJ8JBfNyX/2l5Xy
slpElzxZfvNVK/GwVzzBnoAoYE0bsqZ56jTT27POmioIAjjbAFeMKan7F0hR0vO9
QQmmxVGIlJT1yiK+DYAAdGn+wFT9idVqVDSqPA/h3p8RJQiu2Y/8sL4SSatA5yvv
fPp5X8TeGwb9ICkahGJl+5xc+UGKqWe2WIvAfGr24aduKluU9AjmANf8Sc8h+gfx
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326095957082126638984284443628769283179556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 07:44:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 07:44:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2-prod.aut.a24365.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20344122897354664305094530889045129575089391977117301228044934177499601932312075371907851061886162439042725238919035504846048951102694190639474229152509259296301119697730222826993821198847501311501376702968714474092601877859099752841874556665891136628064000688482244693078865287078398913212665596268264103812179754534429359984194820119195606924227089697922561931714522115003118387727300874594838310089315646567895318402773806749525537232432884315631807472884081219144674513509971167226354906118305780149149785081029635590360642621921294006341686252785794159684865174620689402676930183206255048873506690315482657452307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bb58c3e749f5291fa9d22e6ff080b24778b1a2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1351 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c066.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c067.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2-prod.aut.a24365.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c026.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.retail.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b2239361063ddc09b9ca50fe71a8c230db54a79e9711b32e113a7f0eb33c8e01ddd181549d89362d9770e5d2b7b51b60c8d6bdf46a4c7480cd069f513630fe4b7962d6a1f3a3000ea2b084250bc08d45455d4b6b799ea781eda5580fcb29c89f2e9d09120ac0fb5879a606e2f30d5a0f27ac25db23440eb4680a369d537630bd39fdb3eba0f5b37ede801d6f0ccf24d49d6f753412f412941dea90e3f803a582391c31da31a6a12b6110fe383c8d6bcad8d8fd3032b29c483fdafa09ef6d88c47340ed5e215b4b18320a8eddb6e3e176728fbd2bd7fe573c80ed66141ae74354c9b935673e18e6341a7f5123f8182f2307d4180047fd692d1cac14aca0617a3