cert2-prod.aut.a24365.net

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:93:27:25:ad:da:cc:02:d8:7f:b4:f6:c7:29:61:ad:ab was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cert2-prod.aut.a24365.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:93:27:25:ad:da:cc:02:d8:7f:b4:f6:c7:29:61:ad:ab
Serial Number (int): 293178717698109224350086131961969955155371
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:ef:44:13:04:86:6f:47:90:3d:62:a1:95:31:3f:41:81:28:ee:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:08:59:de:fd:9f:ce:cf:e7:c0:4c:bd:a3:e4:d8:21:70:0e:78:cd
Fingerprint (sha256): 51:20:1c:98:d6:ad:4e:ea:c0:bf:02:ce:7c:bf:de:ed:da:e4:07:00:84:7f:15:33:e8:5b:ea:9e:9b:bf:9b:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert2-prod.aut.a24365.net

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert2-prod.aut.a24365.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
aqfer.lijit.com
at.medicareplantips.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c050.aqfer.net
c900.aut-prod.aqfer.com
c900.aut-prod.aqfer.net
c901.aut-prod.aqfer.net
cdptag.hclcx.com
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aut-prod.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
maxt.umzu.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.adsonica.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.hewillworshiptwo.com
t.hewillworshipyou.com
t.kristalytics.com
t.nypost-preprod.alley.ws
t.nypost.com
t.onclive.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.retail.aqfer.com
t1.aiproxies.com

Other certificates including the domain name a24365.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net

Certificate

The complete raw certificate details for cert2-prod.aut.a24365.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIVD/fOrB9Gd1KggUEE
HNAzcXUPOGAQTkmbXSuN59AWxH5AtcCh23igEw4kpfcPmBW3oBR7rA8/px8ZUboA
Mmm/g/BnWmX7+5ImB5NDfk1dBgxEhp3FLNyTtk0XbS+oDKPc3s88MJddDYM3Oqe5
M5ygWtJ2JnNN0XxUHLwKwnEltWNNFL1SLvwUOLy7aPDHsyric3vMTCZJ7RvTYIrt
tBIv28+WNKTp/9ywNVX/LMs0QZv+Hw6Bep0YkAHgZUjOiWSw/LW0c99E91/B/XyJ
lTEmXGgeb65zjsZvDNT5JPmzu8QSDB7G8v8ts9dPR15fhDn5Zwy6zVQnNcNg92fD
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293178717698109224350086131961969955155371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 08:09:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-11 08:09:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2-prod.aut.a24365.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20925025856148201319049802986302890162825857001667422685055901111116525230580204298534031388138250941815402434920242722653925112455875574770120090198434362521228848435068696505362530207761901919637223648780585200636439671158298992425620450810179451967132368435402178504643521210407984326249422865991688439023795359107709946039971995936479640109873476416445813132534586803118554344288436835919547832755696153944191415645967182125651325204499587472071860143523926502428639659512595372958675401179483377733612653028997873840568782493385241755213225298160028462037559286756692580549487511332731553299554817725014464775027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							baef441304866f47903d62a195313f418128eec6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1273 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.medicareplantips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c050.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdptag.hclcx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2-prod.aut.a24365.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxt.umzu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.adsonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshiptwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.hewillworshipyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kristalytics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.onclive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.retail.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186da3b91100000040300473045022100fc97b3b299238c7cf2679c7060bf414fd356de7e5b01f8a1757437efd2721a930220655bbb6f1c481b98e51d42c24e9f9991b989bbc99d5a009d82e0545b1f516c73007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186da3b9106000004030047304502204249b5d4957a84c81754f3ef102c01fd70a8be74b798fad36198e653f2c5f118022100c6374f90779335bcb45fe956b85364b62d1746a60ea96bafc3796191817a5fb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a15c657e0b971bc27b941d442be47d1cd9642027ee7f825d9bf6d3232db7e5de76eba47b1b349881bf89ac461bcfb365cf767bc58b753a71dbb97151e69a737903e0a3b95a118b483fff14c1f7e90c713fe90670c82021927241c2cc0a564659c3374990a93bfe198848d61ff98bf597e0fcf2fb39d282b30b87ae7b1c32d8512be71ad546c28d4c3a68bd539a9540a9fe73368fd01292e475fa3b118aa4c035af1acfd065986bbfd44d43f740eee08e927bf7fb786909bb310f82b5c2952286a11c75d0980acc2adb80d6f7daf1d21c14be4b76a1d5b70ad277fc96c1a6007a0b858fa0074abebe14bf324437ce49b6b4a04604cc05c92232c0c7a016dc3c10