cert1.a2.atm.aqfer.net

Issued by R3

About this certificate

This digital certificate with serial number 04:58:33:27:00:18:78:9e:8c:04:7b:a6:37:b5:63:ec:9f:b6 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert1.a2.atm.aqfer.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:33:27:00:18:78:9e:8c:04:7b:a6:37:b5:63:ec:9f:b6
Serial Number (int): 378461985145384890712082579383669192695734
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:b2:cd:53:86:52:d2:00:e4:02:8f:39:dd:b2:f1:f6:c3:48:32:37
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:1f:f7:91:fa:e8:9f:ce:2d:12:ef:5c:5d:42:4e:71:79:0e:27:96
Fingerprint (sha256): 34:e5:bc:4a:82:93:1e:68:de:28:58:23:d6:ab:d4:49:98:fa:26:18:2b:76:60:25:34:20:92:ec:b5:20:93:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert1.a2.atm.aqfer.net

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert1.a2.atm.aqfer.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.myaquagames.com
aio.api-preprod.aqfer.net
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c004.aqfer.net
c004.preprod.aqfer.net
c020.preprod.aqfer.net
c021.preprod.aqfer.net
c025.aqfer.net
c027.aqfer.net
c028.aqfer.net
c029.aqfer.net
c031.aqfer.net
c033.aqfer.net
c034.aqfer.net
c035.aqfer.net
c036.aqfer.net
c037.aqfer.net
c038.aqfer.net
c039.aqfer.net
c041.aqfer.net
c044.aqfer.net
c046.aqfer.net
c049.aqfer.net
c050.aqfer.net
c052.aqfer.net
c055.aqfer.net
c901.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
dbds.aio-preprod.aqfer.net
dbds.aqfer.com
dbds.pxcel.com
demo.allantgroup.com
demoping.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.aqfer.com
graphds.pxcel.com
imds.aio-preprod.aqfer.net
imds.aqfer.com
imds.pxcel.com
maxt.umzu.com
mcdp.modernatx.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.farmers.com
t.aiproxies.com
t.aqfer.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.onclive.com
t.pxcel.com
t1.aiproxies.com
testops.aqfer.net
tt.aqfer.com

Other certificates including the domain name aqfer.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
*.api-preprod-new.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
portal.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
support.gotinfotech.com
cert1.a2.atm.aqfer.net
support.gotinfotech.com
*.api-preprod-new.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a1.atm.aqfer.net
*.api-preprod.aqfer.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
*.api-preprod-new.aqfer.net
neutralid.airdxp.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
concourse.aqfer.net
*.api-preprod-new.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
docs.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert1.a1.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
auth.portal.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net

Certificate

The complete raw certificate details for cert1.a2.atm.aqfer.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iiWOqm0207nTn6md4G7
SigmNEKbbs8sGgo1A5tJf+A09YSDF5UCQiX0CBym1q7WjVEWP34mcaN3kipqlF12
yGX93mi4RrMkNgiXiIJmn1sD1VOeqeCCV9Jxyn+J86y0BPKTl2bC089BaxCpD1QT
6zeTVNO+86OVcO8xFuC27hM0QzWOLg8Y9zqXArpu6rsck71pEN6YMYBaJIdUNM3i
TG5KFvdM9XQqOSdzSq1npzeOFWWkHNuL75mVcHPU3LvbG7RasmfOVl7dNQvi8rfK
1ck0S0yOP/H0Bp7LK1nnWEbZUaCAY0mr4s+xZ3gWL8UKGqe/whooZGal7WpS3pcI
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378461985145384890712082579383669192695734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-08 09:34:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-06 09:34:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert1.a2.atm.aqfer.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26530058155975938204944872602656059411342478485551392099958718261331285511762496044920466630649580102290537657918226731636843835949860906561262199323266965056578818268825873541647514046886441885561496277923748359952908274935512443637794241792451472368832616383707466812389467632514753124198417431255750472457951697453296404973482751796720254048392171700143738715090196009941557007782388784034623674356061758472472440837503056856385397136197392044347009325423321166310320734185938878193338293039519826920902711016731797601087708587242018015331671977950014303268908892135113034733834217897979812254007819939408619440301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9b2cd538652d200e4028f39ddb2f1f6c3483237
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.myaquagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c004.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c004.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c020.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c021.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c025.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c027.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c028.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c029.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c031.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c033.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c034.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c035.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c037.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c038.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c039.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c041.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c044.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c046.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c049.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c052.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c055.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdp.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.farmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testops.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.aqfer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001827d051a18000004030047304502200b1a0cc7dd3e1a618d019fd461b18b4145c2ef884b53312437ae659aba375aea022100ddad14c66c75dad793d6d59be9c7eea79108a00773fb863a72f690201a087b1000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001827d051c48000004030047304502204619c85d1706b0771a35d027725b90db4ca8f21c1de3604ddb2ed8bfbb7e496e022100cc3beacb7ba3eda65e43fafbf23ee94b2ed2532e9995a8ebddcef61eee95825b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c2e8ea1062b1511ad331dcefca978b6cbc5e438255213127aaefbe250f407ba0e18514037c2cd686c4909d523bb932745caa642d509ee6da936cf8f1166b43204056a77f38ee52ea02df6e89850c70ec651fafc8938e6e7459b1d68e026dcb3b8add9a6f8d91e3ed344246b9230cd3965ef229bed7a92817fb799573ce08e758dc67045c5b5169b6004d151ec764666302061205398e1359d63f7519128e2c52abb1119fa9f70d73086d7a7a3d9ddcd7c76ea7577bcc0b18e35b341f8e451e84aa06f9a22bd985d91a1d120ef3e82f8578741c95d4f9b9ee30235660b3c753a90146d9be1a45026d177fa82501cb8ff6a9508aa827837bf7f36e44250266868