cert2-prod.aut.a24365.net

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:41:de:90:b4:31:de:ac:e6:4b:cc:89:41:68:83:5b:37 was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cert2-prod.aut.a24365.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:41:de:90:b4:31:de:ac:e6:4b:cc:89:41:68:83:5b:37
Serial Number (int): 324716933487147394549448226972190864792375
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:85:71:5c:5c:86:83:44:58:a1:66:9f:cc:5b:cb:87:61:6e:90:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:9c:38:8d:ec:8c:c4:d7:1d:2c:a9:b2:c9:8c:1d:62:77:e3:b8:75
Fingerprint (sha256): 56:2e:c9:9a:b9:46:c0:3e:70:d7:74:bf:84:40:94:17:4b:1f:de:32:97:6b:1c:48:fa:75:b0:d4:e7:dc:7c:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert2-prod.aut.a24365.net

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert2-prod.aut.a24365.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aio.api-preprod.aqfer.net
api.us-east-1.a.insights.rapid.acxiom.io
api.us-east-1.a.rdata.rapid.acxiom.io
api.us-east-1.a.rgraph360.rapid.acxiom.io
aqfer.lijit.com
aut.pendleton-usa.com
auts.pendleton-usa.com
ax.clubpublix.com
ax.greenwisemarket.com
ax.publix.com
c036.aut-prod.aqfer.net
c045.aut-prod.aqfer.net
c066.aut-prod.aqfer.net
c067.aut-prod.aqfer.net
c900.aut-prod.aqfer.com
c900.aut-prod.aqfer.net
c901.aut-prod.aqfer.net
cert1.a2.atm.aqfer.net
cert2-prod.aut.a24365.net
comsync.lijit.com
dbds.aio-preprod.aqfer.net
dbds.c900.aut-prod.aqfer.net
demo.allantgroup.com
demoping.aut-prod.aqfer.com
graphds.aio-preprod.aqfer.net
graphds.c900.aut-prod.aqfer.net
h1.c026.aut-prod.aqfer.net
h1.c054.aut-prod.aqfer.net
h1.c901.aut-prod.aqfer.net
idresgraph.bmwusa.com
imds.aio-preprod.aqfer.net
imds.c900.aut-prod.aqfer.net
marketing.aut-prod.aqfer.com
metrics.acxiom.com
metrics.acxiomdemo.com
metrics.gorving.com
metrics.infusedinnovations.com
metrics.johnstonmurphy.com
metrics.myacxiom.com
metrics.polaris.com
px.180bytwo.com
px.anteriad.com
px.meritb2b.com
px.newpig.com
pxdrop.lijit.com
rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services
routing.aiproxies.com
rtag.breadfinancial.com
rtag.comenity.net
t.aiproxies.com
t.decider-preprod.alley.ws
t.decider.com
t.nypost-preprod.alley.ws
t.nypost.com
t.pagesix-preprod.alley.ws
t.pagesix.com
t.retail.aqfer.com
t1.aiproxies.com
test.c026.aut-prod.aqfer.net

Other certificates including the domain name a24365.net

(limited to 100 certificates)
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert2-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net
cert1-prod.aut.a24365.net

Certificate

The complete raw certificate details for cert2-prod.aut.a24365.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zZFdlGgy/HbJNtyD0WU
U1kKKzRKdxAvDvunxCqVNBW/1LiLZsDVY/q0H6pW3p7+gxCP6D14Di6IhXmoBkZn
KlLBBOUb22mzkPatpr7N0jJOtPUy34OTge5NNnSWURc7NMyjcG1yrag8T3lEK+x3
mRO7U5r9/tgUCm3wR6ivwtdZBheEq4YSUujsG39UB1mooABwqZd8noTBnDcf7KE7
mmF5nc9dK57GXOrcsJitrG2EUyga2AdaVrtXAysIL9iw9QpdyKVs8ufS6oX78uGa
Nn9my6JXQoc17WQXhm2t/SjOD/2vDUy/PsK5TKCz063XvL8uHVsVhkLlqvDceq2g
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324716933487147394549448226972190864792375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 06:14:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 06:14:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert2-prod.aut.a24365.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26663044541382341793622588145165296129237137378535357761470301323661589790020106699127029684367000681122727009991891132323152572389491552955244952388721962929285746300166278624382955804666811853767225129278208539680120184281585840260712040490260231515135212842794824336932992357070810877789264445708713237010777922380909710353172683124955610168978350385309084295624913177393080284056441098770274444146756931626119898662180445992475317358575564614966016561793986746904774194596569696175331967727383231992746658856350251570516425718509415292707260358683758777912797730677877675935750544213399591882234241683517472612529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a485715c5c86834458a1669fcc5bcb87616e901e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aio.api-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.insights.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.rdata.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us-east-1.a.rgraph360.rapid.acxiom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqfer.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aut.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auts.pendleton-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.clubpublix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.greenwisemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.publix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c036.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c045.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c066.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c067.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.a2.atm.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert2-prod.aut.a24365.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comsync.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoping.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c026.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c054.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h1.c901.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idresgraph.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.aio-preprod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imds.c900.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.aut-prod.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.acxiomdemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.gorving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.infusedinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.johnstonmurphy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.myacxiom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.polaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.180bytwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.anteriad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.meritb2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.newpig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxdrop.lijit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapiddemo.us-east-1.a.appdev.client01.realid.acxiom.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routing.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.breadfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtag.comenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.decider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix-preprod.alley.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pagesix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.retail.aqfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.aiproxies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.c026.aut-prod.aqfer.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018adfc9901c00000403004630440220271147a9101bac463e3ad80a891804557710d608a9da3ea6b97858ebf9119e25022005e144473c36e0df9db7f1fa32e9bbf4391d3813523d42031990ff48d6d51931007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adfc99016000004030046304402202c870396d6fbd7e70cd0aef5d219f424e22024d3465ad8c380df2e19f41e8c4d02204ce3c40a4f8349371c690817212925ada3a08dd0da2dbf4ea7c2fcc366685d02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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