cert1.a2.atm.aqfer.net

Issued by R3

About this certificate

This digital certificate with serial number 04:36:42:af:14:9d:53:bb:f1:11:ec:82:49:50:5c:14:28:e2 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert1.a2.atm.aqfer.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:36:42:af:14:9d:53:bb:f1:11:ec:82:49:50:5c:14:28:e2
Serial Number (int): 366913029658556639707101779257160474306786
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:a4:d8:6c:2a:6d:d2:a5:a6:af:df:9c:66:10:13:37:40:7f:25:61
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:53:35:a2:2f:dc:b6:54:46:20:7e:27:bd:80:48:2f:5c:2f:87:eb
Fingerprint (sha256): 47:a3:aa:f6:a2:85:ed:29:d0:f2:5b:87:13:69:43:31:50:97:8b:ec:21:69:c5:44:ff:d6:c3:78:c6:30:49:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert1.a2.atm.aqfer.net

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert1.a2.atm.aqfer.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ads.myaquagames.com
aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c020.preprod.aqfer.net
c021.preprod.aqfer.net
c025.aqfer.net
c027.aqfer.net
c029.aqfer.net
c031.aqfer.net
c033.aqfer.net
c034.aqfer.net
c035.aqfer.net
c036.aqfer.net
c037.aqfer.net
c038.aqfer.net
c039.aqfer.net
c041.aqfer.net
c044.aqfer.net
c046.aqfer.net
c049.aqfer.net
c050.aqfer.net
c055.aqfer.net
c056.aqfer.net
c057.aut-prod.aqfer.net
c900.aqfer.com
c900.aut-prod.aqfer.net
c901.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
maxt.umzu.com
mcdp.modernatx.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.farmers.com
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.nypost-preprod.alley.ws
t.nypost.com
t.onclive.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t1.aiproxies.com

Other certificates including the domain name aqfer.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
*.api-preprod-new.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
portal.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
support.gotinfotech.com
cert1.a2.atm.aqfer.net
support.gotinfotech.com
*.api-preprod-new.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a1.atm.aqfer.net
*.api-preprod.aqfer.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
*.api-preprod-new.aqfer.net
neutralid.airdxp.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
concourse.aqfer.net
*.api-preprod-new.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
neutralid.airdxp.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
docs.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert1.a1.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
helpdesk.magrr.org
cert1.a2.atm.aqfer.net
admin-staging.aqfer.net
cert1.a2.atm.aqfer.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
*.api-new-preprod.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
auth.portal.aqfer.net
helpdesk.magrr.org
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
support.gotinfotech.com
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net

Certificate

The complete raw certificate details for cert1.a2.atm.aqfer.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EHLfmFWnPaD2v7svkRr
cdbe+U6H3W1huXmc+7qxOJ5/ARr17/pcJEZnrnd4VQ9RrPjLLdEAuh/G01+8X4lM
CJn+qA8yKg8+n++kpSecBvbGVSRg1QWxv5bfWb7Q6tyC++a3zp7EHCzXq3Ewuvjg
YDjZ6hkE2Klmo+H1zU3MML7oZsD1ifhQpC16PveOEvSZxYo8iej+v7bwI+aRYQ/m
rOJQZdI7RyQfJNuY4aY8I8q1IWaMzIVXi4Ni2e0cxWE71rXDaqw1S2UFLUzASjUq
NN35m8TIFkkDGyS+WlSDE5BiLzebfzCyvyfWRTS7m4jT9hdmLBTEn4e9gtl8gPxf
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366913029658556639707101779257160474306786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 09:38:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 09:38:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert1.a2.atm.aqfer.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28309824985415875246827014442553051138346916455171692612483940520249493339959388224489541878776631977062292115851042723933561540508059287310888776756112520986910308269900276074281202060829309882879087760264818165643033819651949277336396221359489777031756216759970875582168982338111108145908466336883228978507252833969164093691402136528488158993623977513894662339571198879695998547252742340266275690115807967081342335463960528134280829971033871485890096773471620184686779437403424973496177633026211885044562512832013815759053808094286156818880740861008742923360466910485487495829087577511760135315776617258405123088371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17a4d86c2a6dd2a5a6afdf9c66101337407f2561
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ads.myaquagames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c020.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c021.preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c025.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c027.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c029.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c031.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c033.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c034.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c035.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c037.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c038.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c039.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c041.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c044.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c046.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c049.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c055.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c056.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c057.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdp.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.farmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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