jobportal.digitalhrecosystem.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:46:2a:7a:ec:0c:5e:8c:c3:81:00:c7:20:15:19:6b:b8:14 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jobportal.digitalhrecosystem.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:2a:7a:ec:0c:5e:8c:c3:81:00:c7:20:15:19:6b:b8:14
Serial Number (int): 285213089303414806273685056426008826853396
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:71:b5:24:10:b8:0a:b0:53:e4:fa:f8:b6:3f:74:62:b1:0d:68:2b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:0a:b8:82:89:fe:39:6a:dd:2a:34:a9:0b:72:31:bf:94:3c:35:0f
Fingerprint (sha256): 54:40:80:f0:46:52:26:fd:3c:93:5e:42:66:49:dd:b0:52:53:63:03:1d:23:8d:57:61:ee:2a:30:4f:e2:ee:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jobportal.digitalhrecosystem.ch

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jobportal.digitalhrecosystem.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply.turkishtechnology.com
apprenticeship.ncauk.org
callings.amazix.com
career.globworks.com
career.heritage-staffing.ch
career.nordlicht-it.com
career.samuelz.com
career.thinkport.digital
career.ubva-group.com
careers.aos-group.co.uk
careers.blacksmiths.be
careers.comex2000uk.com
careers.dizplai.com
careers.fokustalent.com
careers.globetracker.com
careers.heits.digital
careers.hlpartnership.co.uk
careers.itadvanced.ch
careers.italianhospitalitycollection.com
careers.limesurvey.org
careers.medify.eu
careers.microtill.com
careers.novasatus.global
careers.roambee.com
careers.secure-od.com
careers.tea.blue
careers.team-group.eu
careers.up-sold.com
careers.whitekeyvillas.com
careers.xeotek.com
carreiras.lusoclinic.pt
connekt.contakt.nl
djob.sphere-telecom.com
job.fokus-msp.de
jobportal.digitalhrecosystem.ch
jobs.admorris.com
jobs.advantekgroup.com
jobs.aikitdigital.com
jobs.appointemployment.com
jobs.asioso.com
jobs.byzzplus.com
jobs.canevaworld.it
jobs.coconutlime.co.uk
jobs.crowdberry.eu
jobs.digital-pulses.de
jobs.fiolegal.com
jobs.genco.gr
jobs.globalpos.fr
jobs.inconcepts.at
jobs.intervalgroup.com
jobs.invitise.com
jobs.itc-engels.de
jobs.keen.global
jobs.l4b-software.com
jobs.licent.lu
jobs.madfly.fr
jobs.mysweetdays.ch
jobs.onboard.fr
jobs.phase-be.de
jobs.rd.tax
jobs.rec-u.com
jobs.ticketpay.de
jobs.uspi-formation.ch
jobs.yubba.de
karriere.awork.dk
karriere.liebper.de
karriere.personalpartner4you.de
opdrachten-vacatures.osi8.nl
opportunities.devops-people.com
peoplematters.adquam.com
portail.mission-telecom.com
portal.csarecruitment.co.uk
portal.headhuntersonline.es
recruiter.zwarttech.com
recruiting.hs-tumbler.com
recruiting.itlogix.it
recruitment.jetenterprises.co.uk
recruitment.theomegagroup.co.uk
recruits.elgeadi.es
recrutement.easyshipping.fr
rekruut.rekruut.de
scholarship.cbcuv.com
skydive.darc-corp.com
talent.planisource.com
vacatures.takeoff.physio
weiterkommen.itc-engels.de
werkenbij.sherpaan.nl

Other certificates including the domain name digitalhrecosystem.ch

(limited to 100 certificates)
jobportal.digitalhrecosystem.ch
jobportal.digitalhrecosystem.ch
jobportal.digitalhrecosystem.ch
digitalhrecosystem.ch
jobportal.digitalhrecosystem.ch
digitalhrecosystem.ch
digitalhrecosystem.ch

Certificate

The complete raw certificate details for jobportal.digitalhrecosystem.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCVpR6GnPFlLIne2qXln
tF+1pSwPn+zAAt7bT3I/pbXiRh0IiB56RdJW+I97qACSEUP7xurL/YzwaWDsDgDj
S1OpxGiQE3Nt7abVZ3tQHuzsHj6Lh7f4Jz7ho4Vo90Ir6ezsZPxpvYOkjH6xEVIA
/b2oPc5bmeMhxkMl3SnCi2DTieFLwr8WFfOqGvZuBH44xbhx3a2Fr1W+jz9hW/DI
Mn17oc3gnoITVeQPDFFkigFzWl0dEwh4eB+xNIMwBzlpG/44A2xdmUTitNdeFKLd
EZSvFaeODE9FdCQ/zJcvsJrDmgDP641xEs5ApY8NBisl1L7yjNQpRaQe+nbbIS5b
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285213089303414806273685056426008826853396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 16:51:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 16:51:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jobportal.digitalhrecosystem.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21226483408880496452996294565622842078167840047593758057733563329018808126240205643718280148244165028903279058047032867912617853841435382038114838122752229476291366303011884067052107444072762760174478210276394423210575437182304114626971911267714632561244682041815003278571110593234555932045754111966137687712248869159929979380584422900001866050171951598438488767425648018350240278941742089349486190515569411502781903464320062944477093492215928896907741482135855030845746312942848602105337259672529130119688119669523727125239944272746857667911599663102011619074670438636516513143025999371486042307765902616069103573901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f771b52410b80ab053e4faf8b63f7462b10d682b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.turkishtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprenticeship.ncauk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callings.amazix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.globworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.heritage-staffing.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.nordlicht-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.samuelz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.thinkport.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.ubva-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.aos-group.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.blacksmiths.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.comex2000uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.dizplai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.fokustalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.globetracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.heits.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.hlpartnership.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.itadvanced.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.italianhospitalitycollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.limesurvey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.medify.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.microtill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.novasatus.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.roambee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.secure-od.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.tea.blue'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.team-group.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.up-sold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.whitekeyvillas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.xeotek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreiras.lusoclinic.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connekt.contakt.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djob.sphere-telecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job.fokus-msp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobportal.digitalhrecosystem.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.admorris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.advantekgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.aikitdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.appointemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.asioso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.byzzplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.canevaworld.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.coconutlime.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.crowdberry.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.digital-pulses.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.fiolegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.genco.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.globalpos.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.inconcepts.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.intervalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.invitise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.itc-engels.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.keen.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.l4b-software.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.licent.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.madfly.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.mysweetdays.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.onboard.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.phase-be.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rd.tax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.rec-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.ticketpay.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.uspi-formation.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yubba.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.awork.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.liebper.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.personalpartner4you.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdrachten-vacatures.osi8.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunities.devops-people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplematters.adquam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.mission-telecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.csarecruitment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.headhuntersonline.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiter.zwarttech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.hs-tumbler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting.itlogix.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.jetenterprises.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.theomegagroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruits.elgeadi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutement.easyshipping.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rekruut.rekruut.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarship.cbcuv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skydive.darc-corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talent.planisource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacatures.takeoff.physio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiterkommen.itc-engels.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werkenbij.sherpaan.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf828c4b500000403004630440220167b2fdc066bbf54bd734d1b98894ce83fbc88a561f7b807efca3e3c5e3526e002200e59e9911a9afc03361eba8d9d9cda289c79ec6b0b141662942a4070abf0224500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bf828c4ff0000040300473045022100f047deafffc677abcfbf1f59b6b2ffd2c5f1a129da8bbc7ec97964b2933298fb0220413ac6a7abf5183086daf661bc9212a59b20725a95a76271d53a818acfc83d37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00917b61ddbc272d111cbef8fd5b61c1f6e5903278e4e805bab79921a12ea57ddbcf9d5132ab2c559fc24e44bdebe6b3e397985b26ecf27203eaabb5e4448eacd1ff933ab600f858797154c0f8d211a5c40bdb3ff6129acd0e08afdb7d44f6c2ae2879ae3741e5ad6876bea6372dc91809d31792d818782a228e3051053298768a60722fe852adfa7c52d5525b3dcc2dd54599df1b80cb658a390d9c24e1bda3db1ad423bb56b9547fe340744d94792fd7204199c678b1f9bb64d3ec6b3d0e9f20b286e6349a07d6471f6c31f0c57bd11d712778860b3d7804a4cb886d82c6db42f8f9ed4894635e30ad960de24c8dbe52bd02903ef4e1ba48f1576c0f7c62bac2