www.highq.com

- Thomson Reuters Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number f4:0d:22:d7:a0:f8:f7:c8:6a:47:cc:7f:71:44:48:2e was issued on by COMODO CA Limited.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Thomson Reuters Corporation

Organization: Thomson Reuters Corporation
State / Province: Ontario
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): f4:0d:22:d7:a0:f8:f7:c8:6a:47:cc:7f:71:44:48:2e
Serial Number (int): 324399837516480475767534853093847222318
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f1:92:ab:46:20:4e:d2:15:f9:f5:63:c0:bf:23:5c:0e:da:90:eb:07
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 6a:32:16:56:b2:2e:b5:86:fc:43:fe:7b:04:2b:24:e3:df:98:01:ad
Fingerprint (sha256): 5a:2f:64:9c:d3:43:49:2e:95:9a:b6:52:7a:8c:57:59:61:41:6c:d9:19:88:54:66:88:60:54:56:6c:23:21:a3

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.highq.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.highq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.highq.com
adv.gestaovbso.com.br
cdconnect.capdyn.com
cliente.cqsfv.com.br
clientportal.buckles-law.co.uk
clientportal.pickfordsolicitors.com
cms.dehavilland.com
cms.yasa.com
coattorneycm.henrico.us
collaborate.aquabridgelaw.co.uk
collaborate.brownsvilletx.gov
collaborate.chattertons.com
collaborate.foster.com
collaborate.herrick.com
collaborate.lowenstein.com
collaborate.medicaldev.com
collaborate.roschier.com
collaborate.shoosmiths.com
collaborate.ycst.com
connect.weightmans.com
contracts.patriotgis.com
contratos.clarin.com
corporateseurope.demo.highq.com
cp.wiggin.co.uk
crowell.highqsolutions.com
dataroom.arma-corporate.com
dataroom.emwlaw.com
dataroom.fwp.at
dataroom.mapdgroup.com
docportal.betwaygroup.com
documents.holmes-hills.co.uk
extranet.kitopi.com
highq.accesscharity.org.uk
highq.aceto.com
highq.amda.com.au
highq.finaccel.co
highq.iicle.com
highq.intigral.net
highq.kensingtonmortgages.co.uk
highq.legalinnovation.ai
highq.mundipharma.com
highq.plesner.com
highq.sunbeltrentals.co.uk
highq.swansea.ac.uk
hub.xsysglobal.com
inbmv.highq.com
juridico.endemolshine.com.br
lawq.musanada.com
legal.automotive.ricardo.com
legal.buyersedgeplatform.com
legal.invoxpharma.com
legal.mcd.co.kr
legal.merama.io
legal.procomer.com
legal.razer.com
legalhub.alefeducation.com
legalhub.ultimatefinance.co.uk
legalops.propertyguru.com
legalservices.akc.org
legalservices.gccservices.com
legaltool.arcelormittal.com
lsc.emaar.com
my.walderwyss.com
pca.pcajur.highq.com
platform.nai-nl.org
portal.camcom.it
portal.connect.cliffordchance.com
portal.howmansolicitors.co.uk
portaljuridico.sotreq.com.br
saga.fondia.com
testinstance.together.noerr.com
together.noerr.com
vdr.holst-law.com
vdr.howardkennedy.com
vdr.jobsons.law
www.pathfinderdiageo.com

Other certificates including the domain name highq.com

(limited to 100 certificates)
cwp.status.symantec.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
andrei.sterda.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thomsonreuters.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ccd.status.symantec.com

www.highq.com
cc3.status.jasper.com
www.highq.com
www.highq.com
thomsonreuters.com
www.highq.com
www.highq.com
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com

www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
api-status.360cities.net
thomsonreuters.com
api-status.360cities.net
www.highq.com
www.highq.com
cc3.status.jasper.com
merchantstatus.paysafecard.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

*.hqdev.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
offers.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
highq.com
offers.highq.com
cwp.status.symantec.com
www.highq.com
www.highq.com
www.highq.com
eboks-status.reepay.com
www.highq.com
www.highq.com
api-status.360cities.net
www.highq.com
www.highq.com
support2.cdnetworks.net
secure0023.hubspot.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com

Certificate

The complete raw certificate details for www.highq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr27JUQr8Qg9IytYRiJ4t
rfDHXfG8z6oVpSjbSWEJ+o7w5nXa6gAj+CvsN7q5PcXLQfUzUOqCNwYF06haESLY
J2XJGqbYbkZ5x9IxfrlifLZGX0wQo7V77+1vaPjvXeP4GK7yC82wwfkPpkEBrO11
drOj4BKzLSIj8nV6arjoYP2bTuyu4KzDBxcKK1CEkBBpNLiBDNo8A4EfuTSCBHXW
0k04jebwW/tEzf8RhcNzxOZjEjibewuT4rFh8KkkfOmZ+/v3SbGRZpJW3WPJLNLp
eEzelK5+llbX6w+EQl0EfrplY5WzcSNXD4EqpjJZ3XIk1qPFay5TC3CSq3aV1m7W
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324399837516480475767534853093847222318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thomson Reuters Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.highq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22146334175500865489841691671489861616236512148204278688873783337789307215371914564633748842593013168485684151185879256200087391415959482584454312325113402220500640387166709290553198205484109249739444720012723309927652280818891244548977100912792447565806475692288924509243989962895120258388774573480189925286499161705129055357030877318024950953838116029101368908511891379677394438029464719905566529002047117306128788738089029172207278230998253638568215171523265398504607364538566922518964316915754411505446254286119820084933131974358183925875810806525852921626701219723690220963958554248568987170778873948968298927671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f192ab46204ed215f9f563c0bf235c0eda90eb07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.gestaovbso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdconnect.capdyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliente.cqsfv.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.buckles-law.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.pickfordsolicitors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.dehavilland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.yasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coattorneycm.henrico.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.aquabridgelaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.brownsvilletx.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.chattertons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.foster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.herrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.lowenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.medicaldev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.roschier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.shoosmiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaborate.ycst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.weightmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracts.patriotgis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratos.clarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateseurope.demo.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.wiggin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowell.highqsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.arma-corporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.emwlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.fwp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataroom.mapdgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docportal.betwaygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.holmes-hills.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.kitopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.accesscharity.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.aceto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.amda.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.finaccel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.iicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.intigral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.kensingtonmortgages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.legalinnovation.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.mundipharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.plesner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.sunbeltrentals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highq.swansea.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.xsysglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbmv.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juridico.endemolshine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawq.musanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.automotive.ricardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.buyersedgeplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.invoxpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.mcd.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.merama.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.procomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.razer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhub.alefeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhub.ultimatefinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalops.propertyguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalservices.akc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalservices.gccservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaltool.arcelormittal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsc.emaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.walderwyss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pca.pcajur.highq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.nai-nl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.camcom.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.connect.cliffordchance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.howmansolicitors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaljuridico.sotreq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saga.fondia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testinstance.together.noerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'together.noerr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.holst-law.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.howardkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdr.jobsons.law'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pathfinderdiageo.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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