san3232.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 03:06:ae:e0:2d:54:94:48:da:ef:1e:fb:c1:b1:b9:30:c0:ee was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san3232.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:ae:e0:2d:54:94:48:da:ef:1e:fb:c1:b1:b9:30:c0:ee
Serial Number (int): 263611001661978747557448841861019559051502
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:89:3b:bf:88:42:9a:0c:ef:f0:10:09:70:41:56:e9:25:e1:6e:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:d9:7a:5a:f6:32:0f:e6:81:8a:85:dc:fd:57:6b:40:33:58:b1:4c
Fingerprint (sha256): 3b:aa:ed:7d:27:ea:bf:3f:93:8c:14:cc:7e:06:0d:9e:01:ba:61:23:be:d7:fb:a8:9c:a5:1b:4b:13:2e:8c:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san3232.cdntwrk.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3232.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3mcanadasafety.ufcontent.com
academy.dynamicsignal.com
adviser.ufcontent.com
af.ufcontent.com
aws-startup.ufcontent.com
awstraining.ufcontent.com
blog.shivnadarfoundation.org
canadianadvisoryboard.equifax.ca
catalog.walpoleoutdoors.com
cognex.ufcontent.com
content.hubdoc.com
content.snapapp.com
demohub.brainrider.com
discover.cph.org
execleaders.ufcontent.com
explore.execu-search.com
explore.precisionlender.com
f15.ufcontent.com
fatherhood.ufcontent.com
fuelforthought.windstreambusiness.com
gihcentral.medtronic.com
go.axway.com
grandrounds.ufcontent.com
hi.healthyindoors.com
hiscox.ufcontent.com
hub-en.equifax.ca
hub-fr.equifax.ca
hub.55c44add5b9d4fcea2df6606cb67a24f.relevantize.com
hub.associaonline.com
hub.kvvinc.co.za
hub.mbaco.com
hub.nationwideadvisory.com
hub.resourceadvisor.com
ideas.baudville.com
inside.onedigital.com
insights.randstadsourceright.com
insights.retailmenot.com
itential.ufcontent.com
jellyvision.ufcontent.com
kvv.ufcontent.com
lacher.ufcontent.com
learn.dealertrack.com
learn.thebdx.com
livingston.ufcontent.com
lrwonline.ufcontent.com
magazine.cyclenews.com
mbxsystems.ufcontent.com
mimecast.ufcontent.com
partners.cloudwords.com
partners.zilliant.com
partnerstack.ufcontent.com
r1a.ufcontent.com
r1tv2.ufcontent.com
read.epgmediallc.com
resources.agilquest.com
resources.checkmarx.com
resources.cloudwords.com
resources.concordiatechnology.org
resources.datadrivenmarketing.equifax.com
resources.dealertrack.com
resources.demandgen.com
resources.digitalshadows.com
resources.dowjones.com
resources.kenblanchard.com
resources.lytx.com
resources.moredirect.com
resources.ordr.net
resources.pathguide.com
resources.sigmacomputing.com
resources.smartlinxsolutions.com
resources.snowflake.net
resources.system-analysis.cadence.com
resources.talmix.com
san3232.cdntwrk.com
staging.intelligentdemand.com
surecloud.ufcontent.com
tab.ufcontent.com
techsmith.ufcontent.com
toolbox.igus.com
transmitsecurity.ufcontent.com
typhoon-hil.ufcontent.com
ufusertest.pmsrvr.com
www.hub.camaf.co.za
www.lalamagdigital.com
zu.zilliant.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san3232.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe9igoTQpcAlpyzqJrLT
CIzdiNKOBV3kiuSACzvNHUhRoUD6jsqTSJGwLgvJzWP+f4j8lZxEUK9gIdJ/XAXC
ISLMpBDJkG3fSR4iFRLwxxlwPc0ZDk9j0OBcMX+/4/br96W7t62HRtukkM+Oa4aj
RaS1tp3TiBXdjmEkkmuoLpKyWzvrvSWTW+wjsQ+/HAa+Ybo0wNpjbeR/ReZ1yROm
rDte1BGVuI3FmdakNUw7D6kHNj+9Dkt0qhiMDRb1kf268lA3Fu5KCn9QIKpwVWj1
2xabkMrBS7rw0L7N/LPi74NoHu//9DZ9AB2mXjPPJFlAsAPwPOd6EDRMcspw1JOa
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263611001661978747557448841861019559051502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-25 16:11:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-23 16:11:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san3232.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24986991124794160065549944058706869872156949405932838365305508294069652622021762839940155972768254826497298163855130069763246953084446966410374486625612332820127659457083067208107673181737991238830210751249577171407523084872264893000887507263135519349998087932662518763899408556212931787406212609309248564127415433466929379023797601222348401702718524862202533972126312421190611629289906852090961240588684044687462965515121441420151655652543655752873922496704954414095305323497272581613668797451825632298469269685361685457432146056006253119875202107887086116572029405292190020349398776658117276867482328614607539903231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0893bbf88429a0ceff01009704156e925e16e0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3mcanadasafety.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.dynamicsignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviser.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-startup.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awstraining.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.shivnadarfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianadvisoryboard.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.walpoleoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognex.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.hubdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.snapapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demohub.brainrider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.cph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execleaders.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.execu-search.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.precisionlender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f15.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherhood.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelforthought.windstreambusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gihcentral.medtronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrounds.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.healthyindoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiscox.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-en.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub-fr.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.55c44add5b9d4fcea2df6606cb67a24f.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.associaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.kvvinc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.mbaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.nationwideadvisory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.resourceadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.baudville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.onedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.randstadsourceright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.retailmenot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itential.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jellyvision.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvv.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacher.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.thebdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingston.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrwonline.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.cyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbxsystems.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimecast.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.zilliant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerstack.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1a.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.epgmediallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.agilquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.checkmarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.concordiatechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.datadrivenmarketing.equifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.demandgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.digitalshadows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.kenblanchard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.lytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.moredirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.ordr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.pathguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.sigmacomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.smartlinxsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.snowflake.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.system-analysis.cadence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.talmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3232.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.intelligentdemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surecloud.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tab.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techsmith.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolbox.igus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transmitsecurity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typhoon-hil.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufusertest.pmsrvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hub.camaf.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lalamagdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zu.zilliant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018236574ce8000004030046304402202db61ef4a576bd1ceab2f5acc14a64a5d5aba8eeed767bfd2d91c69c67e4d47b02202f0f14209b39fdc1f3c0cef2ffce271ce821bc681c52c8101bc8192a32b9c5fa00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018236574d190000040300473045022100d71fd2885db576cbe626cbc94e1281ca5080c30d305db9ba349366d4a4daf82f02201bfcfd129be22495cdaa17bb96b14ae07b4e440036634f2182b93c5d5f79bb94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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