USDGR0LYCPOOL01.aramarkuc.net

- ARAMARK -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 97:11:bd:9f:68:c1:36:6b:00:00:00:00:50:f9:b6:57 was issued on by Entrust, Inc..

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARAMARK

Organization: ARAMARK
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 97:11:bd:9f:68:c1:36:6b:00:00:00:00:50:f9:b6:57
Serial Number (int): 200805542415230339498096889371127559767
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:52:02:ac:07:34:f8:2d:99:f8:3a:de:7e:a6:47:85:02:46:ad:2b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): db:e2:18:57:57:46:45:7c:d7:61:c8:34:e4:10:9e:85:f2:56:29:6d
Fingerprint (sha256): 35:f0:eb:01:00:10:dc:b4:23:a0:1d:08:7c:cb:02:c6:72:2b:5e:f9:03:8f:92:0c:ad:4a:41:79:37:e2:19:2c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate USDGR0LYCPOOL01.aramarkuc.net

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for USDGR0LYCPOOL01.aramarkuc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

USDGR0LYCPOOL01.aramarkuc.net
sip.1st-fresh.com
sip.aramark.be
sip.aramark.cl
sip.aramark.ca
sip.aramark.co.uk
sip.aramark.ie
sip.aramark.com
sip.aramark.cn
sip.aramark.com.ar
sip.aramark.es
sip.ipsrebates.com
sip.hpsionline.com
sip.westernfirstaid.com
sip.avendra.com
sip.ameripride.com
sip.canadianlinen.com
sip.aramark.lu
sip.aramark.de
sip.aramark.fr
sip.avoca.com
sip.Lifeworksrestaurantgroup.com
sip.harvesttableculinary.com
USDGR0LYC20.fss.aramark.com
lync.aramark.net
meet.ipsrebates.com
meet.hpsionline.com
meet.westernfirstaid.com
meet.avendra.com
meet.ameripride.com
meet.canadianlinen.com
meet.aramark.lu
meet.aramark.de
meet.aramark.fr
meet.avoca.com
meet.lifeworksrestaurantgroup.com
meet.harvesttableculinary.com
DGRLSWEB.aramarkuc.net
LyncdiscoverInternal.1st-fresh.com
LyncdiscoverInternal.aramark.be
LyncdiscoverInternal.aramark.cl
LyncdiscoverInternal.aramark.ca
LyncdiscoverInternal.aramark.co.uk
LyncdiscoverInternal.aramark.ie
LyncdiscoverInternal.aramark.com
LyncdiscoverInternal.aramark.cn
LyncdiscoverInternal.aramark.com.ar
LyncdiscoverInternal.aramark.es
LyncdiscoverInternal.ipsrebates.com
LyncdiscoverInternal.hpsionline.com
LyncdiscoverInternal.westernfirstaid.com
LyncdiscoverInternal.avendra.com
LyncdiscoverInternal.ameripride.com
LyncdiscoverInternal.canadianlinen.com
LyncdiscoverInternal.aramark.lu
LyncdiscoverInternal.aramark.de
LyncdiscoverInternal.aramark.fr
LyncdiscoverInternal.avoca.com
LyncdiscoverInternal.Lifeworksrestaurantgroup.com
LyncdiscoverInternal.harvesttableculinary.com
DGRLSWEBEXT.aramarkuc.net
Lyncdiscover.1st-fresh.com
Lyncdiscover.aramark.be
Lyncdiscover.aramark.cl
Lyncdiscover.aramark.ca
Lyncdiscover.aramark.co.uk
Lyncdiscover.aramark.ie
Lyncdiscover.aramark.com
Lyncdiscover.aramark.cn
Lyncdiscover.aramark.com.ar
Lyncdiscover.aramark.es
Lyncdiscover.ipsrebates.com
Lyncdiscover.hpsionline.com
Lyncdiscover.westernfirstaid.com
Lyncdiscover.avendra.com
Lyncdiscover.ameripride.com
Lyncdiscover.canadianlinen.com
Lyncdiscover.aramark.lu
Lyncdiscover.aramark.de
Lyncdiscover.aramark.fr
Lyncdiscover.avoca.com
Lyncdiscover.Lifeworksrestaurantgroup.com
Lyncdiscover.harvesttableculinary.com
USDGR0LYC23.fss.aramark.com
USDGR0LYC22.fss.aramark.com
USDGR0LYC21.fss.aramark.com
USDGR0LYC24.fss.aramark.com

Other certificates including the domain name aramarkuc.net

(limited to 100 certificates)
dgrowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCEDGE01.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
phlowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USDGR0LYCMED01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCEDGE01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
dgrowas.aramarkuc.net
webmail.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net

Certificate

The complete raw certificate details for USDGR0LYCPOOL01.aramarkuc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9lpknawE1FHmL76Qh2h
ZkSQXFyXoSxv1ttioBgJx2trGGNWN1tSEUhyNKHGkx3YECHXR9u9mb3kEC0dwvp4
ypk4oIy1c7x+gSfo56FUiECI40+Ab9rS3CIRczGKF/M+zQCXM20zRgPtdhttRbhY
0EqtOcN4BuTmocTP6Um053TWsIhSn9mgOQxtOca2ze2pY251sVf4iXWodJJtN306
4XQbHD3uZQJ2Qkt7DJAECAYAhSqs+n1bUu074Hpyc35rnx1IFMkWyOf4ggONYfst
GkkWtawOIJdV5rulCpdxgnUakU9uDfJWhaBueR2keHidlf3BZSUsAGcXhF9SvVMn
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200805542415230339498096889371127559767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 14:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 15:11:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USDGR0LYCPOOL01.aramarkuc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24723679514209691210425333432392799912472136875254840461213626214886893304541574657589048642256602562049858955315488667684337740997676616582964299252476751089673964632584698327579431971226864313787952137703129345792679880904075507022493015912898127122868823402619711475627250402093190956553514683476281351582268751613091522258718651100424655050650207360697268320746337595339688346106211009219163294181356748040786318089041628768161943430457801332354554593199009024968631917410756650607432964498712321307898791472476147174849229843621262539863825297182114091664574732868658795130951106268940445571518298959353658681167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYCPOOL01.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC20.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.aramark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DGRLSWEB.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DGRLSWEBEXT.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC23.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC22.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC21.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC24.fss.aramark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc5202ac0734f82d99f83ade7ea647850246ad2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001858a3ba0ba1ecdeaa389b0476d7db4f94a7b3adbb7b094a732070936d3c0160886ab4655b41fc34f97d778a122f828c5df5e81a49113da55ac378476d9eb8d89eba744e8d3ce07a8f88f31d94fdd100485a587eb24bae26435a278f28be29af6fa9ae626015460cd4f6717b61403d93a763de8855025c1d01ae2a5c4054adf5f950ea944922e4bf1ebc378aab6d5a211a343cba2b588df8593ceef9a8ea8cfc2fcbe165975d6c3e367f2c440dd319e7527c46f0ceb6b3d6b80b346d3ffedbb25a1cdb7a813ff51a1ef54e5f00c03793000ab5ef4fa005cdd8325a98054b51180f9f03d8a044980a718b24288aa39a4a745f357a1d06455b5fadeec812a4ff9f