cert1.a2.atm.aqfer.net

Issued by R3

About this certificate

This digital certificate with serial number 03:07:56:77:58:34:f9:c3:ea:5c:38:6b:83:b5:81:8c:86:cb was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert1.a2.atm.aqfer.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:56:77:58:34:f9:c3:ea:5c:38:6b:83:b5:81:8c:86:cb
Serial Number (int): 263833767643740185780476848867074064025291
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:b3:e9:f1:4b:0d:d6:fb:80:8b:84:12:67:f7:e2:f0:ad:18:a0:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:7b:43:39:4f:b8:06:f3:05:fc:c9:48:55:ea:f2:9c:e2:b6:5c:98
Fingerprint (sha256): 46:2a:e7:5a:f7:9b:c8:1e:3c:bc:86:3a:23:7a:ee:9b:b1:6a:20:d2:3b:48:43:32:50:f8:99:e4:a7:b2:d6:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert1.a2.atm.aqfer.net

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert1.a2.atm.aqfer.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.myaquagames.com
aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c004.aqfer.net
c004.preprod.aqfer.net
c020.preprod.aqfer.net
c021.preprod.aqfer.net
c025.aqfer.net
c027.aqfer.net
c028.aqfer.net
c029.aqfer.net
c031.aqfer.net
c033.aqfer.net
c034.aqfer.net
c035.aqfer.net
c036.aqfer.net
c037.aqfer.net
c038.aqfer.net
c039.aqfer.net
c041.aqfer.net
c044.aqfer.net
c046.aqfer.net
c049.aqfer.net
c050.aqfer.net
c052.aqfer.net
c055.aqfer.net
c056.aqfer.net
c057.aut-prod.aqfer.net
c900.aut-prod.aqfer.net
c901.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
dbds.aio-preprod.aqfer.net
dbds.aqfer.com
dbds.pxcel.com
demo.allantgroup.com
demoping.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.aqfer.com
graphds.pxcel.com
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.aqfer.com
imds.pxcel.com
maxt.umzu.com
mcdp.modernatx.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.farmers.com
t.aiproxies.com
t.aqfer.com
t.decider-preprod.alley.ws
t.decider.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.nypost-preprod.alley.ws
t.nypost.com
t.onclive.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.pxcel.com
t1.aiproxies.com
test1-c900.aut-preprod.aqfer.net
tt.aqfer.com

Other certificates including the domain name aqfer.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
*.api-preprod-new.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
portal.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
support.gotinfotech.com
cert1.a2.atm.aqfer.net
support.gotinfotech.com
*.api-preprod-new.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a1.atm.aqfer.net
*.api-preprod.aqfer.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
*.api-preprod-new.aqfer.net
neutralid.airdxp.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
concourse.aqfer.net
*.api-preprod-new.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
docs.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert1.a1.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
auth.portal.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net

Certificate

The complete raw certificate details for cert1.a2.atm.aqfer.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vn51AFpEqQx/nBL/x0g
7V/rBC+lpGSTN3bwC6iJAAXfzdP2TlrDh0kX2NnssfxPcxF66M4psTh7jlg1fBJN
prhZ/rR5PG3e8bfP54hUZ9HzbSTfZ+CP2LUXFbRnIcAy3duvu7EBRoFw8S4zhToQ
9ZfK3s1fL35SR+yREbGAUtMwJMQgRLodcLgF57ijVsD41ybBtmXER4RPtow+UhCc
1o/t7d7I/ZHAuhY86YYO9UcImVzlTy8uCt+c167LFQW417UBke5deg2ccKRjGBdI
zJ7HlvzzSexohrg+QvCjSHk8awSKp240H9KFMmBZAN86s+hhoVr/qqBQmZYIVOQn
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263833767643740185780476848867074064025291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-25 10:57:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-23 10:57:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert1.a2.atm.aqfer.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26933127723366439618132593021240780137023189740102612065616452993299826241898017018082500826484959585906818563633115447772217680480254807234910355524726169779844671684365026686898718959869760377483333978296316606802692073917192455763728549333727414270009383330538700836716399914839521672535555290559203201554003777865783934848178526297673844826493583339228463224578012399193512100114287513674304946184185941798129714930267300569174097859790152701793139964818329312064707108339205473929598546175465246847182768498350354058608566104309866070008608220132911082666605939451983474755311093584229090923381789450742060558211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afb3e9f14b0dd6fb808b841267f7e2f0ad18a06c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1742 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.myaquagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c004.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c004.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c020.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c021.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c025.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c027.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c028.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c029.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c031.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c033.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c034.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c035.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c037.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c038.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c039.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c041.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c044.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c046.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c049.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c052.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c055.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c056.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c057.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdp.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.farmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pxcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1-c900.aut-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tt.aqfer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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