cert1.a2.atm.aqfer.net

Issued by R3

About this certificate

This digital certificate with serial number 03:54:ef:c5:f3:aa:af:2e:d3:44:67:cb:c8:45:9f:fc:2d:db was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert1.a2.atm.aqfer.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:ef:c5:f3:aa:af:2e:d3:44:67:cb:c8:45:9f:fc:2d:db
Serial Number (int): 290239289932261834925230469771418712944091
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:53:89:21:4e:03:a2:f0:ac:f8:9f:26:90:0f:9b:1f:ef:46:57:62
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:45:7f:3c:d7:fe:4b:07:9a:97:ac:ac:6f:ec:16:f8:ea:c4:65:3e
Fingerprint (sha256): 3b:38:15:dc:07:d6:5e:05:0c:d8:35:35:e7:7d:7f:0a:0d:3a:54:71:bc:0d:df:30:16:5c:c1:d6:ef:e4:f5:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert1.a2.atm.aqfer.net

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert1.a2.atm.aqfer.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.myaquagames.com
aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c004.aqfer.net
c004.preprod.aqfer.net
c020.preprod.aqfer.net
c021.preprod.aqfer.net
c025.aqfer.net
c027.aqfer.net
c028.aqfer.net
c029.aqfer.net
c031.aqfer.net
c033.aqfer.net
c034.aqfer.net
c035.aqfer.net
c036.aqfer.net
c037.aqfer.net
c038.aqfer.net
c039.aqfer.net
c041.aqfer.net
c044.aqfer.net
c046.aqfer.net
c049.aqfer.net
c050.aqfer.net
c052.aqfer.net
c055.aqfer.net
c056.aqfer.net
c057.aut-prod.aqfer.net
c900.aut-prod.aqfer.net
c901.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
dbds.aio-preprod.aqfer.net
dbds.aqfer.com
dbds.pxcel.com
demo.allantgroup.com
demoping.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.aqfer.com
graphds.pxcel.com
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.aqfer.com
imds.pxcel.com
maxt.umzu.com
mcdp.modernatx.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.farmers.com
t.aiproxies.com
t.aqfer.com
t.decider-preprod.alley.ws
t.decider.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.nypost-preprod.alley.ws
t.nypost.com
t.onclive.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.pxcel.com
t1.aiproxies.com
test1-c009.aut-preprod.aqfer.net
tt.aqfer.com

Other certificates including the domain name aqfer.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
*.api-preprod-new.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
portal.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
support.gotinfotech.com
cert1.a2.atm.aqfer.net
support.gotinfotech.com
*.api-preprod-new.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a1.atm.aqfer.net
*.api-preprod.aqfer.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
*.api-preprod-new.aqfer.net
neutralid.airdxp.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
concourse.aqfer.net
*.api-preprod-new.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
docs.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert1.a1.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
auth.portal.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net

Certificate

The complete raw certificate details for cert1.a2.atm.aqfer.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYv1BNJuRNswQEnVcFro
NYWwQ7iwnn8NfyoQa5w2j5e+BM9L8Vv6CIGx5wLAt+l/mKeL4sLGe8NDn9oah1iy
Zxev6cWtZ58YxaZ3VXHBDZjEyhADQP10qsL/9neAg51IzBioV+cVCiI8cJnjJsX4
/o08K1kphHSmGglBtpxy7ACwD30C0PzUaSHF+145CnamB3pDcjKaaI/FcvR/1zuL
irwm2KVQVxOPfJqO/A9RglmicCnTwwYnjvNE14S+oavP8H+fI7Qc6BXJP0lNfiKQ
onocULciTxS/riQvRtPXX6DIuLfdqKemdrPdjIvzeU3QWvvtx9boqnVrrHzuFHyI
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290239289932261834925230469771418712944091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 09:57:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-23 09:57:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert1.a2.atm.aqfer.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21403288959894450776293028110430784924625729808859206089384536923148170478652568606371455618163454871842629621844014281445042601852931449892222168075365462555997997195781792910638908062257864930906064447923790387862357740608580038050131428406323667512510377938068015291598676322992997110380515083456992181748373562123026781070084780969046807661447760141605691274805113447208784235537731120435721630424462225425942947140089469508960924498009173724086954753933199158717026160812778445240237244067594320303208103346548135896106697642527342541474489573491233413813242637920632091687752215701004372611400754667798891628619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							705389214e03a2f0acf89f26900f9b1fef465762
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1742 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.myaquagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c004.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c004.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c020.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c021.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c025.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c027.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c028.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c029.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c031.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c033.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c034.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c035.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c037.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c038.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c039.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c041.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c044.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c046.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c049.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c052.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c055.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c056.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c057.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdp.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.farmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1-c009.aut-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.aqfer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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