www.highq.com

- Thomson Reuters Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bf:cc:16:2f:34:26:78:a4:00:30:3e:88:b6:45:94:eb was issued on by COMODO CA Limited.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Thomson Reuters Corporation

Organization: Thomson Reuters Corporation
State / Province: Ontario
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bf:cc:16:2f:34:26:78:a4:00:30:3e:88:b6:45:94:eb
Serial Number (int): 254942225706934684469133414984696829163
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4a:e1:98:ec:b4:e3:8d:64:97:02:d3:a3:1c:2d:77:c5:91:fe:cd:54
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 5f:5d:76:e3:b7:64:8d:ad:e0:5f:f1:9a:f9:1c:e7:b9:89:1c:28:a5
Fingerprint (sha256): 51:0d:e2:fd:21:db:8d:f2:f8:1f:e1:a1:a2:0e:6f:cd:76:ab:bc:7c:0d:a6:65:a3:0d:f6:c1:a5:89:cc:1c:6d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.highq.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.highq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.highq.com
aerogel.highq.com
assaabloy.highq.com
bioibericalegal.highq.com
clientportal.carpmaels.com
clientportal.wottonkearney.com
coattorneycm.henrico.us
contracts.patriotgis.com
corporateseurope.demo.highq.com
cribl.highq.com
cruzecampos.mail.highq.com
documents.holmes-hills.co.uk
ecuouc.highq.com
extranet.kitopi.com
inbmv.highq.com
joelsonlaw.highq.com
jonesday.highq.com
law.franklintn.gov
legalservices.akc.org
lptraining.highq.com
muadvogados.highq.com
orizzomarques.highq.com
palermoecastelo.highq.com
pascuayaquinsn.mail.highq.com
phrd.mail.highq.com
portelasj.highq.com
sophusconsulting.highq.com
sussmanshank.highq.com
us-authorities.informationexchange.mercedes-benz.highq.com

Other certificates including the domain name highq.com

(limited to 100 certificates)
cwp.status.symantec.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
andrei.sterda.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thomsonreuters.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ccd.status.symantec.com

www.highq.com
cc3.status.jasper.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
www.highq.com
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
thomsonreuters.com
api-status.360cities.net
www.highq.com
www.highq.com
cc3.status.jasper.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

*.hqdev.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
offers.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
highq.com
offers.highq.com
cwp.status.symantec.com
www.highq.com
www.highq.com
www.highq.com
eboks-status.reepay.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
www.highq.com
support2.cdnetworks.net
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.highq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07UqDulyzUonVvH8i/mU
0wdfuEAyg9s/VtJzh+5WLfAlb534WAGFCFa15MTxeiJEy4fair+G/L9x/hzOln4J
+4wc+WGzGgC/9wcGAhQkJMjAUZEZrAKr53agCOJwMTrFASzwbU4tT9xlkQeMGZ+r
gHGl3tbBc3Igkr0tHN56FKMxfbEvQH1sEnPcPS2cPxWi0JCKNGoZ+Wojr+r5zSdq
+Kv7e6gpu+JMpmVtPp4YOzgvcpUlCvNc/PXgDkhoCNaDKCU4LSX1MAne3WaDMtft
WSsJI9wnNW+ISLzFAfLQCLlN2dJLnQIuOtSyV/GkLO2rWosNKXg5mCHMan40UcWY
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254942225706934684469133414984696829163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thomson Reuters Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26725617788833421763423586874174356972448450355419329576104445389062415437419450099373954923412907108580060598424133570393805707688630463701096924229624353925231439203496887060896225049927253630524990490755091945483541168658616111406350358746094747672519858272371143468960990167889286991894165858216741032843143149098284796244252474355428347911487308769933809060957561659058907144345096407891261019833382151961141589014856590409146447272336685188397992806966946144644542495647400110123326937064129198796894385480559724410439217699013550957984722447609604662885304562129419668322375700377355993497045334777682154854591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ae198ecb4e38d649702d3a31c2d77c591fecd54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (728 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerogel.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assaabloy.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioibericalegal.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.carpmaels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.wottonkearney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coattorneycm.henrico.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracts.patriotgis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateseurope.demo.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cribl.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruzecampos.mail.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.holmes-hills.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuouc.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.kitopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbmv.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joelsonlaw.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonesday.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.franklintn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalservices.akc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lptraining.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muadvogados.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orizzomarques.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palermoecastelo.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascuayaquinsn.mail.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phrd.mail.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portelasj.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sophusconsulting.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sussmanshank.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-authorities.informationexchange.mercedes-benz.highq.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040cc02f924269779203f70f76422a42119bdd0403e2ef07295e46ca0ec016b2b3083308c0d178fad6b4342f3cd0135999f48bada45793c19d3c31d0f73fe881c9bf8c536f7b99f19bc35e94f45f9afb7d1933330b22c9cb75d931455e9db51370e0762a23aa3973e0b3dd12c87e5a85d8ee98fab33841e3733b20e6e3031ea8c894ea5f750d27177d2f11099c6e9e0982586d25716e75959eaa53f21b781684b089f2630a835b55935777a3dbdd1aa8c57a04e8e0f158708d947e27229e5530af82110af667d49112f529d262983331ee39164622d6b3ef0e6af3f31452040577863fea10bff4faea7166e437b98b496a24ccd2426b6496c607af3a861e87e9c