san2420.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e3:98:87:0b:71:f8:e9:8a:cc:06:3f:36:30:99:03:a3:fe was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san2420.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:98:87:0b:71:f8:e9:8a:cc:06:3f:36:30:99:03:a3:fe
Serial Number (int): 338783698933905303182351033847026012103678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:e1:b4:e7:ee:fd:ec:ad:85:40:ea:43:be:35:e7:3f:89:1e:60:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:6d:f4:e8:12:67:a9:ee:f1:b0:d8:89:61:32:9a:c6:e9:80:65:e6
Fingerprint (sha256): 37:d0:85:73:b9:19:91:cf:16:76:c6:d5:8a:55:35:87:9d:4e:1d:d1:4a:39:93:97:bb:e7:15:5a:96:61:04:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san2420.cdntwrk.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2420.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.dynamicsignal.com
canadianadvisoryboard.equifax.ca
catalog.walpoleoutdoors.com
community.chorus.ai
connect.ykknorthamerica.com
content.hubdoc.com
content.snapapp.com
content.southwestsolutions.com
content.ssp-worldwide.com
digital.insidegolfmedia.com
digital.macdirectory.com
digital.meetinreykjavik.is
digital.miamilivingmagazine.com
digital.oceanhomemag.com
digital.virtualmobiletechnologies.com.mx
discover.cph.org
discover.nwea.org
explore.precisionlender.com
explore.versionone.com
flip.summitcat.com
fuelforthought.windstreambusiness.com
hcmresources.avanti.ca
hi.healthyindoors.com
hi.iaq.net
hub-en.equifax.ca
hub-fr.equifax.ca
hub.associaonline.com
hub.content4demand.com
hub.execu-search.com
hub.mbaco.com
hub.pennwealth.com
hub.praxisvet.com
hub.resourceadvisor.com
hub.retailtouchpoints.com
hub.sxsw.com
hub.ykknorthamerica.com
ideas.baudville.com
info.looker.com
inside.onedigital.com
insights.randstadsourceright.com
learn.avanti.ca
learn.thebdx.com
magazine.cyclenews.com
partners.cloudwords.com
publications.ovma.org
read.cluttoncox.co.uk
read.dmtmag.com
read.epgmediallc.com
read.timesprintingdigital.com
resourcecenter.abilitynetwork.com
resources.aprimo.com
resources.apriori.com
resources.auduboncompanies.com
resources.biznessapps.com
resources.boaweb.com
resources.cloudwords.com
resources.concordiatechnology.org
resources.dynamicsignal.com
resources.kenblanchard.com
resources.moredirect.com
resources.nanolumens.com
resources.pathguide.com
resources.prometic.com
resources.softwareag.com
resources.talmix.com
resources.univeris.com
resources.zilliant.com
san2420.cdntwrk.com
toolbox.igus.com
uberflip.westsidedigs.com
viewer.e-digitaledition.com
www.balharbourdigital.com
www.balharbourfloridaguide.com
www.balharbourfloridaguidebrazil.com
www.balharbourfloridaguidelatinamerica.com
www.balharbourfloridaguidemexico.com
www.cultureddigital.com
www.hub.camaf.co.za
www.newlifestylesdigital.com
www.southbaydiggs.com
www.swppcdigital.com
www.topsnews.org
www.ultratravelusdigital.com
www.veniceftldigital.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san2420.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINajCCDFKgAwIBAgISA+OYhwtx+OmKzAY/NjCZA6P+MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA5MDYxMjU3MzBaFw0yMTEyMDUxMjU3MjlaMB4xHDAaBgNVBAMT
E3NhbjI0MjAuY2RudHdyay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBF5RgE0pJGHyNGw1cysbHrORdgDKUjobko4DfUkUkLQ8sDtlJYLPtYv1+
ZcNcQRscZjyUD7aUcs0WUAemMclPlEd9zD1pEc3wsJAs2E1SE6y18ci7Vi71Lppw
LxisoWs9wv7I8QSJ5Sbb/6cqRgv6v8S9wPdFYd3XzMjoOQcgq6wCg4cZ3qIbVmzx
vZUVVYCIFjPsqEHMMPR+RjJjcJqXSblwniQLcO1UK5p6xFjimTzQGdom/hYn/FMt
wkCUCn38zlxotrljQk3O5mMStKgumAr885A/7nx4gsl3t/k/yqcYLDH6sAmmTzv8
3OZ6gckyaf6C11XbdP6xrlFk7VDnAgMBAAGjggqMMIIKiDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFC/htOfu/eythUDqQ7415z+JHmCFMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIIWQYDVR0RBIIIUDCCCEyCGWFjYWRlbXkuZHluYW1pY3NpZ25hbC5j
b22CIGNhbmFkaWFuYWR2aXNvcnlib2FyZC5lcXVpZmF4LmNhghtjYXRhbG9nLndh
bHBvbGVvdXRkb29ycy5jb22CE2NvbW11bml0eS5jaG9ydXMuYWmCG2Nvbm5lY3Qu
eWtrbm9ydGhhbWVyaWNhLmNvbYISY29udGVudC5odWJkb2MuY29tghNjb250ZW50
LnNuYXBhcHAuY29tgh5jb250ZW50LnNvdXRod2VzdHNvbHV0aW9ucy5jb22CGWNv
bnRlbnQuc3NwLXdvcmxkd2lkZS5jb22CG2RpZ2l0YWwuaW5zaWRlZ29sZm1lZGlh
LmNvbYIYZGlnaXRhbC5tYWNkaXJlY3RvcnkuY29tghpkaWdpdGFsLm1lZXRpbnJl
eWtqYXZpay5pc4IfZGlnaXRhbC5taWFtaWxpdmluZ21hZ2F6aW5lLmNvbYIYZGln
aXRhbC5vY2VhbmhvbWVtYWcuY29tgihkaWdpdGFsLnZpcnR1YWxtb2JpbGV0ZWNo
bm9sb2dpZXMuY29tLm14ghBkaXNjb3Zlci5jcGgub3JnghFkaXNjb3Zlci5ud2Vh
Lm9yZ4IbZXhwbG9yZS5wcmVjaXNpb25sZW5kZXIuY29tghZleHBsb3JlLnZlcnNp
b25vbmUuY29tghJmbGlwLnN1bW1pdGNhdC5jb22CJWZ1ZWxmb3J0aG91Z2h0Lndp
bmRzdHJlYW1idXNpbmVzcy5jb22CFmhjbXJlc291cmNlcy5hdmFudGkuY2GCFWhp
LmhlYWx0aHlpbmRvb3JzLmNvbYIKaGkuaWFxLm5ldIIRaHViLWVuLmVxdWlmYXgu
Y2GCEWh1Yi1mci5lcXVpZmF4LmNhghVodWIuYXNzb2NpYW9ubGluZS5jb22CFmh1
Yi5jb250ZW50NGRlbWFuZC5jb22CFGh1Yi5leGVjdS1zZWFyY2guY29tgg1odWIu
bWJhY28uY29tghJodWIucGVubndlYWx0aC5jb22CEWh1Yi5wcmF4aXN2ZXQuY29t
ghdodWIucmVzb3VyY2VhZHZpc29yLmNvbYIZaHViLnJldGFpbHRvdWNocG9pbnRz
LmNvbYIMaHViLnN4c3cuY29tghdodWIueWtrbm9ydGhhbWVyaWNhLmNvbYITaWRl
YXMuYmF1ZHZpbGxlLmNvbYIPaW5mby5sb29rZXIuY29tghVpbnNpZGUub25lZGln
aXRhbC5jb22CIGluc2lnaHRzLnJhbmRzdGFkc291cmNlcmlnaHQuY29tgg9sZWFy
bi5hdmFudGkuY2GCEGxlYXJuLnRoZWJkeC5jb22CFm1hZ2F6aW5lLmN5Y2xlbmV3
cy5jb22CF3BhcnRuZXJzLmNsb3Vkd29yZHMuY29tghVwdWJsaWNhdGlvbnMub3Zt
YS5vcmeCFXJlYWQuY2x1dHRvbmNveC5jby51a4IPcmVhZC5kbXRtYWcuY29tghRy
ZWFkLmVwZ21lZGlhbGxjLmNvbYIdcmVhZC50aW1lc3ByaW50aW5nZGlnaXRhbC5j
b22CIXJlc291cmNlY2VudGVyLmFiaWxpdHluZXR3b3JrLmNvbYIUcmVzb3VyY2Vz
LmFwcmltby5jb22CFXJlc291cmNlcy5hcHJpb3JpLmNvbYIecmVzb3VyY2VzLmF1
ZHVib25jb21wYW5pZXMuY29tghlyZXNvdXJjZXMuYml6bmVzc2FwcHMuY29tghRy
ZXNvdXJjZXMuYm9hd2ViLmNvbYIYcmVzb3VyY2VzLmNsb3Vkd29yZHMuY29tgiFy
ZXNvdXJjZXMuY29uY29yZGlhdGVjaG5vbG9neS5vcmeCG3Jlc291cmNlcy5keW5h
bWljc2lnbmFsLmNvbYIacmVzb3VyY2VzLmtlbmJsYW5jaGFyZC5jb22CGHJlc291
cmNlcy5tb3JlZGlyZWN0LmNvbYIYcmVzb3VyY2VzLm5hbm9sdW1lbnMuY29tghdy
ZXNvdXJjZXMucGF0aGd1aWRlLmNvbYIWcmVzb3VyY2VzLnByb21ldGljLmNvbYIY
cmVzb3VyY2VzLnNvZnR3YXJlYWcuY29tghRyZXNvdXJjZXMudGFsbWl4LmNvbYIW
cmVzb3VyY2VzLnVuaXZlcmlzLmNvbYIWcmVzb3VyY2VzLnppbGxpYW50LmNvbYIT
c2FuMjQyMC5jZG50d3JrLmNvbYIQdG9vbGJveC5pZ3VzLmNvbYIZdWJlcmZsaXAu
d2VzdHNpZGVkaWdzLmNvbYIbdmlld2VyLmUtZGlnaXRhbGVkaXRpb24uY29tghl3
d3cuYmFsaGFyYm91cmRpZ2l0YWwuY29tgh53d3cuYmFsaGFyYm91cmZsb3JpZGFn
dWlkZS5jb22CJHd3dy5iYWxoYXJib3VyZmxvcmlkYWd1aWRlYnJhemlsLmNvbYIq
d3d3LmJhbGhhcmJvdXJmbG9yaWRhZ3VpZGVsYXRpbmFtZXJpY2EuY29tgiR3d3cu
YmFsaGFyYm91cmZsb3JpZGFndWlkZW1leGljby5jb22CF3d3dy5jdWx0dXJlZGRp
Z2l0YWwuY29tghN3d3cuaHViLmNhbWFmLmNvLnphghx3d3cubmV3bGlmZXN0eWxl
c2RpZ2l0YWwuY29tghV3d3cuc291dGhiYXlkaWdncy5jb22CFHd3dy5zd3BwY2Rp
Z2l0YWwuY29tghB3d3cudG9wc25ld3Mub3Jnghx3d3cudWx0cmF0cmF2ZWx1c2Rp
Z2l0YWwuY29tghh3d3cudmVuaWNlZnRsZGlnaXRhbC5jb20wTAYDVR0gBEUwQzAI
BgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgCUILwe
jtWNbIhzH4KLIiwN0dpNXmxPlD1h204vWE2iwgAAAXu7ZlLFAAAEAwBHMEUCIQCR
zC+BzLU7AapHkd8rLhzV+jcYEscghjweQ8tBXdsahAIgS/hMh5jcZt9BG5bxRaYh
SJlyyMtxdjc2nyb6KXcCrzoAdwB9PvL4j/+IVWgkwsDKnlKJeSvFDngJfy5ql2iZ
fiLw1wAAAXu7ZlL/AAAEAwBIMEYCIQChMbxhZGg49rm4DFP1wA2om/O+T1U8mm0A
f4NvdJ0mwQIhAOEEry3XmbViQVRVFqxDup/N4/s+5UpzNiXzxZM6hk2QMA0GCSqG
SIb3DQEBCwUAA4IBAQCh4AGOmSOPPnlWzuDZQtP/v+9O6DENujdpOGnrEQeLQWDx
4rb8x29DRddHy19zRd3GfCxDyAaCrjepOszw/SjI3/uKQycdyPTNThggl8ueXVFT
ch+gxs7hbG8YxMXO+dh14Cg+pCJwIGncuEmqXH3VCKJlE0nnBp+FP/QeYFQTO189
Yh7jtSHsb8hL8gITZeF3Q6UGX6hBwJWUdYiNCisOviwbVJMcRPUfIG35rY3Lss4V
eb6Q2FtA9izxZJnw7BT+GjVMjP09FBKCtxiqRFJPFqrcyQDAwf2KS2Kcd6aXSjyk
vHGxLz4j4aGQQj3ShiDABNPQfpQmLK8ASwjrhlxs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwReUYBNKSRh8jRsNXMrG
x6zkXYAylI6G5KOA31JFJC0PLA7ZSWCz7WL9fmXDXEEbHGY8lA+2lHLNFlAHpjHJ
T5RHfcw9aRHN8LCQLNhNUhOstfHIu1Yu9S6acC8YrKFrPcL+yPEEieUm2/+nKkYL
+r/EvcD3RWHd18zI6DkHIKusAoOHGd6iG1Zs8b2VFVWAiBYz7KhBzDD0fkYyY3Ca
l0m5cJ4kC3DtVCuaesRY4pk80BnaJv4WJ/xTLcJAlAp9/M5caLa5Y0JNzuZjErSo
LpgK/POQP+58eILJd7f5P8qnGCwx+rAJpk87/NzmeoHJMmn+gtdV23T+sa5RZO1Q
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338783698933905303182351033847026012103678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-06 12:57:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 12:57:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san2420.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24375620388132191829717371219915789586656591364083660370086394501305458822442793693908439535921429909499589426591143100433610882412979264440098142234260460369218771154327280862632528511974157458403309945057638264929739416149184083812016493069521734902216469275481936814209573215133795862055859235605208184924923380450142021732270551759916680798549592455900778127930404871430163431065459217064482265265323839670558584188541610956971965086390189330490553490714002345475604585055313880435670127703452462682457236849080246134372117342888493086232106682511783524790950089001916368750673989148236139646095654655868365787367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fe1b4e7eefdecad8540ea43be35e73f891e6085
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.dynamicsignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianadvisoryboard.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.walpoleoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.chorus.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ykknorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.hubdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.snapapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.southwestsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ssp-worldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.insidegolfmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.macdirectory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.meetinreykjavik.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.miamilivingmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.oceanhomemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.virtualmobiletechnologies.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.cph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.precisionlender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.versionone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flip.summitcat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelforthought.windstreambusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcmresources.avanti.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.healthyindoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.iaq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-en.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-fr.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.associaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.content4demand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.execu-search.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.mbaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.pennwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.praxisvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.resourceadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.retailtouchpoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.sxsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.ykknorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.baudville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.looker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.onedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.randstadsourceright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.avanti.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.thebdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publications.ovma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.cluttoncox.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.dmtmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.epgmediallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.timesprintingdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecenter.abilitynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.aprimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.apriori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.auduboncompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.biznessapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.boaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.concordiatechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dynamicsignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.kenblanchard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.moredirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nanolumens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.pathguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.prometic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.softwareag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.talmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.univeris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.zilliant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2420.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolbox.igus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uberflip.westsidedigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewer.e-digitaledition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguidebrazil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguidelatinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balharbourfloridaguidemexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cultureddigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.camaf.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlifestylesdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbaydiggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swppcdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topsnews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultratravelusdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.veniceftldigital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017bbb6652c5000004030047304502210091cc2f81ccb53b01aa4791df2b2e1cd5fa371812c720863c1e43cb415ddb1a8402204bf84c8798dc66df411b96f145a621489972c8cb717637369f26fa297702af3a0077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017bbb6652ff0000040300483046022100a131bc61646838f6b9b80c53f5c00da89bf3be4f553c9a6d007f836f749d26c1022100e104af2dd799b56241545516ac43ba9fcde3fb3ee54a733625f3c5933a864d90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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