wpm01.eccmp.com

Issued by R3

About this certificate

This digital certificate with serial number 03:58:3d:38:15:27:9d:ca:ba:96:23:6a:86:90:83:fc:b0:79 was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wpm01.eccmp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:58:3d:38:15:27:9d:ca:ba:96:23:6a:86:90:83:fc:b0:79
Serial Number (int): 291363080189759616788671624724893247778937
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:cb:83:56:fa:f0:42:7b:c6:e1:3d:dc:bd:d3:0f:e9:42:9b:f0:79
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:ae:27:99:f1:3e:a5:c0:70:99:25:c3:02:d3:f4:e9:1e:5c:3a:05
Fingerprint (sha256): 5b:0d:a0:be:f3:34:84:0a:f4:cf:59:8e:d7:de:09:69:95:8e:5d:0d:15:19:bc:4c:14:e7:49:84:f8:af:1e:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wpm01.eccmp.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wpm01.eccmp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

i.e-mail.condenast.com
i.em.freeshipping.com
i.em.goodhousekeepingproshopper.com
i.em.perksmemberservices.com
i.em.scplatinumplus.com
i.em.shopsmarter.com
i.em.travelplus.com
i.em.vipinsidermemberservices.com
i.em.vipmemberservices.com
i.em.vipplusmemberservices.com
i.email.avenue.com
i.email.bankmobile.com
i.email.bgsufalcons.com
i.email.boden.co.uk
i.email.bonefishgrill.com
i.email.bowlmoramf.com
i.email.carrabbas.com
i.email.dine-rewards.com
i.email.disneysports.com
i.email.e.skycity.co.nz
i.email.emmisdigital.com
i.email.fgcuathletics.com
i.email.forteachersonly.com
i.email.holtrenfrew.com
i.email.lovesac.com
i.email.napapijri.com
i.email.penseuropemail.com
i.email.silversea.com
i.email.theatlantic.com
i.email.vrp.com
i.emailone.cheetahdigital.com
i.emails.argosfinancialservices.com
i.eml.condenast.com
i.eo.allstateforyou.com
i.erewards.harrods.com
i.gate1email.com
i.hutlove.co.uk
i.in.cd-newsletters.com
i.info.hotstarupdates.com
i.kcpa.kingcenter.com
i.mail.depaul-blue-demons.com
i.mail.easetripnewsletter.com
i.mail.goyotes.com
i.news.acecash-email.com
i.solemates.vionicshoes.com
wpm01.eccmp.com

Other certificates including the domain name eccmp.com

(limited to 100 certificates)
wpm.ccmp.eu
wpm04.eccmp.com
wpm01.eccmp.com
wpm01.eccmp.com
wpm01.eccmp.com
wpm02.eccmp.com
wpm02.eccmp.com
wpm03.eccmp.com
*.eccmp.com
wpm02.eccmp.com
wpm01.eccmp.com
wpm01.eccmp.com
wpm.eccmp.com
wpm.ccmp.eu
wpm01.eccmp.com
wpm.ccmp.eu
wpm02.eccmp.com
wpm04.eccmp.com
wpm01.eccmp.com
wpm02.eccmp.com
wpm.ccmp.eu
wpm04.eccmp.com
wpm04.eccmp.com
wpm04.eccmp.com
wpm03.eccmp.com
wpm.ccmp.eu
imperva.com
wpm04.eccmp.com
wpm.ccmp.eu
wpm.eccmp.com
wpm01.eccmp.com
wpm03.eccmp.com
wpm.ccmp.eu
wpm01.eccmp.com
wpm04.eccmp.com
wpm01.eccmp.com
*.dev.eccmp.com
wpm04.eccmp.com
wpm.ccmp.eu
wpm04.eccmp.com
wpm03.eccmp.com
imperva.com
wpm01.eccmp.com
wpm02.eccmp.com
wpm.ccmp.eu
wpm01.eccmp.com
wpm01.eccmp.com
wpm.ccmp.eu
wpm03.eccmp.com
wpm04.eccmp.com
wpm.ccmp.eu
*.eccmp.com
wpm02.eccmp.com
wpm02.eccmp.com
wpm01.eccmp.com
wpm04.eccmp.com
wpm01.eccmp.com
*.eccmp.com
wpm.ccmp.eu
wpm04.eccmp.com
wpm01.eccmp.com
returnpath.eccmp.com
wpm01.eccmp.com
wpm02.eccmp.com
wpm04.eccmp.com
wpm.ccmp.eu
*.internal.eccmp.com
wpm01.eccmp.com
wpm03.eccmp.com
wpm.ccmp.eu
wpm.ccmp.eu
imperva.com
wpm04.eccmp.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm01.eccmp.com
wpm02.eccmp.com
wpm.ccmp.eu
wpm01.eccmp.com
wpm01.eccmp.com
datascience1.eccmp.com
wpm01.eccmp.com
wpm01.eccmp.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm04.eccmp.com
wpm01.eccmp.com
wpm04.eccmp.com
wpm02.eccmp.com
wpm02.eccmp.com
incapsula.com
incapsula.com
wpm04.eccmp.com
wpm04.eccmp.com
wpm04.eccmp.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm02.eccmp.com
wpm04.eccmp.com
imperva.com

Certificate

The complete raw certificate details for wpm01.eccmp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ4LM8kVLjQk9UD16MCn
1msaBhemPhC5NKH0vVssCfkZI0AbgKqoVqsXinyBjNEzgcMXIN0jZWXB5muUFInv
IzQTh+7x7yEDsRZTUNdDHLa8lPnJQr7NtSl6csPuP4mpXlpUPrbFev2jQuymol+a
Om3a8i/Z2fnrCK4Z8zLueDsrnAn6o+spSEgKopLbOSnha6F2WDRig9PilRILFwVh
h1p31wyPi6muqKPvBBV0Zz9muMFD4D5m0bAbQLm89LAc8d8Ybqst0suaCmHRj/06
+QFTgadE96qBRH8j6/ZIe1ATz7MCJzwdX4kF++mFBirbK3S9beV5zBQJi+ihjoJQ
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291363080189759616788671624724893247778937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 16:37:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 16:37:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wpm01.eccmp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24946880360494234477697608318075239629507322642202931894629725368672280798347627472655158038018496464692613174500182255510071800248453363294697138206421506408551802203977126908038734984265982960233015985054654343101088798539486048858357465486381820210175182872364877548819246206228391438245102399231312767730266094442313953186863869775849108142857627989473401565190300196216711319090069075025996119739354016189809929127196812292320966526167265955941649708487636060183561589737790545835098917518374010893407762100420133721033738992564454100010925459807055616147924945410778364125192763584401393602972881031318271578217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0acb8356faf0427bc6e13ddcbdd30fe9429bf079
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.e-mail.condenast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.freeshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.goodhousekeepingproshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.perksmemberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.scplatinumplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.shopsmarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.travelplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.vipinsidermemberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.vipmemberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.em.vipplusmemberservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.avenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bankmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bgsufalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.boden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bonefishgrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.bowlmoramf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.carrabbas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.dine-rewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.disneysports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.e.skycity.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.emmisdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.fgcuathletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.forteachersonly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.holtrenfrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.lovesac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.napapijri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.penseuropemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.silversea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.theatlantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.email.vrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.emailone.cheetahdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.emails.argosfinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.eml.condenast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.eo.allstateforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.erewards.harrods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.gate1email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.hutlove.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.in.cd-newsletters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.info.hotstarupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.kcpa.kingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.depaul-blue-demons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.easetripnewsletter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.mail.goyotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.news.acecash-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.solemates.vionicshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm01.eccmp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ec3ef7b1d0000040300483046022100c289185f8c88bd632d6e67a0a96153717d56d68237c70b3d8585ff4b8810a4e302210091fa3c5e193a59b9189f13487c62ad5683b1078c8caf02ae61523b51e8cfc0ef007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ec3ef7c590000040300483046022100cd7204c7a3870bd0c7196fb638233ddd498df4d19abca08eb6ba872a279f2322022100eb54750724c33e716e37974158e893d217bb7b2752017b25827fff6833bfb3a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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