san2558.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:97:8c:6b:88:a2:d9:0a:b7:a7:80:e3:2f:6a:2d:34:e7 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san2558.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:97:8c:6b:88:a2:d9:0a:b7:a7:80:e3:2f:6a:2d:34:e7
Serial Number (int): 380296846380655237513039994078595142989031
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:65:5c:cd:00:74:6a:8e:0e:14:3e:02:ac:43:e9:1c:f2:00:33:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:54:c6:d4:86:e7:25:00:24:cc:4c:6a:e9:4a:02:7d:a7:26:c0:e6
Fingerprint (sha256): 5d:fb:81:58:ec:63:a8:6d:57:03:25:01:84:fb:3a:dc:1a:6f:a1:7f:76:f0:5c:0a:8f:52:b1:e4:d0:b2:39:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san2558.cdntwrk.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2558.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abm.quarry.com
api2-group1.relevantize.com
api2-group2.relevantize.com
api2-group3.relevantize.com
api2-group4.relevantize.com
api2.relevantize.com
ascent.ufcontent.com
ascented.ufcontent.com
beready.fortinet.com
bim360resources.autodesk.com
biotech.parexel.com
blog.swedish.org
canucks.ufcontent.com
clients.spearmarketing.com
constructible.trimble.de
constructible.trimble.fr
core-group1.relevantize.com
core-group2.relevantize.com
core-group3.relevantize.com
core-group4.relevantize.com
core.relevantize.com
cornerstonetest.ufcontent.com
csod-de.ufcontent.com
csod-es.ufcontent.com
csod-fr.ufcontent.com
csod-it.ufcontent.com
demandjump.ufcontent.com
demokat.ufcontent.com
docker.relevantize.com
dotdata.ufcontent.com
duosecurity.ufcontent.com
envista.ufcontent.com
fe-secondary.relevantize.com
fe-theme.relevantize.com
fe.relevantize.com
fivetran.ufcontent.com
fortinet2.ufcontent.com
fortinetit.ufcontent.com
fortinetjp.ufcontent.com
fortinetsing.ufcontent.com
fortinetsp.ufcontent.com
healthx.ufcontent.com
hub.emsdigital.co.za
hub.enrollment.org
imaginit.ufcontent.com
insights.careerbuilder.com
insights.personiv.com
japanhub.parexel.com
kpaonline.ufcontent.com
lessonly.ufcontent.com
logdna.ufcontent.com
nathandunleavy.ufcontent.com
parexelheader.ufcontent.com
partnernews.ufcontent.com
pureweb.ufcontent.com
rainfocus.ufcontent.com
rand3d.ufcontent.com
resources.ecovadis.com
resources.firstcapitolconsulting.com
resources.piano.io
resources.quorumsoftware.ca
resources.rightsourcemarketing.com
resources.securitycompass.com
resources.suki.ai
resources.viewpoint.com
rogersenterprise-en.ufcontent.com
rogersenterprise-fr.ufcontent.com
rossmorello.ufcontent.com
san2558.cdntwrk.com
shout-v2.relevantize.com
showcase.spearmarketing.com
smallbusiness-fr.ufcontent.com
synthio.ufcontent.com
t-lungs-prod.relevantize.com
ufa-edge.relevantize.com
ufa-firefox.relevantize.com
ufa-ie.relevantize.com
ufa-safari.relevantize.com
ufa.relevantize.com
webhooks.relevantize.com
welcomeaboard.spearmarketing.com
wileysocietyleader.ufcontent.com
winmagic.ufcontent.com
wivany.ufcontent.com
wivany2.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san2558.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMujCCC6KgAwIBAgISBF2XjGuIotkKt6eA4y9qLTTnMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMjkxNDU5NThaFw0yMjAxMjcxNDU5NTdaMB4xHDAaBgNVBAMT
E3NhbjI1NTguY2RudHdyay5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDd87wzEXtewmLcu7mJWl/0KVtJMzANiuljDZnz0Ko60BkGE06gCozX2IZo
t+hvzOSN7fRY3zfktQmNoFGYdumIBqTojxFWPyaDJHwLDJtLehWFdjMnGBZFdfIy
zv4mMGcEOJap9I+waPHnWDPcLEFOhjcwXh+PZ7LHX40WGdYF6HNpVw00pTOMn4pI
69nOxYR9cmPDay/hO4XzYZoSeaxgQJQpmgNzZkmVCDzpsOt2OMuW8xgRkIyYsL+n
TcV6JePTbb1Dv7E+mVoUcQQvGNqNdRUVbvDqVEmO40WorA69YzZS+ChY54T3tElN
c89uUu+pY68X77rQHAjb3aKIccftAgMBAAGjggncMIIJ2DAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFLllXM0AdGqODhQ+AqxD6RzyADNJMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIInQYDVR0RBIIIlDCCCJCCDmFibS5xdWFycnkuY29tghthcGkyLWdy
b3VwMS5yZWxldmFudGl6ZS5jb22CG2FwaTItZ3JvdXAyLnJlbGV2YW50aXplLmNv
bYIbYXBpMi1ncm91cDMucmVsZXZhbnRpemUuY29tghthcGkyLWdyb3VwNC5yZWxl
dmFudGl6ZS5jb22CFGFwaTIucmVsZXZhbnRpemUuY29tghRhc2NlbnQudWZjb250
ZW50LmNvbYIWYXNjZW50ZWQudWZjb250ZW50LmNvbYIUYmVyZWFkeS5mb3J0aW5l
dC5jb22CHGJpbTM2MHJlc291cmNlcy5hdXRvZGVzay5jb22CE2Jpb3RlY2gucGFy
ZXhlbC5jb22CEGJsb2cuc3dlZGlzaC5vcmeCFWNhbnVja3MudWZjb250ZW50LmNv
bYIaY2xpZW50cy5zcGVhcm1hcmtldGluZy5jb22CGGNvbnN0cnVjdGlibGUudHJp
bWJsZS5kZYIYY29uc3RydWN0aWJsZS50cmltYmxlLmZyghtjb3JlLWdyb3VwMS5y
ZWxldmFudGl6ZS5jb22CG2NvcmUtZ3JvdXAyLnJlbGV2YW50aXplLmNvbYIbY29y
ZS1ncm91cDMucmVsZXZhbnRpemUuY29tghtjb3JlLWdyb3VwNC5yZWxldmFudGl6
ZS5jb22CFGNvcmUucmVsZXZhbnRpemUuY29tgh1jb3JuZXJzdG9uZXRlc3QudWZj
b250ZW50LmNvbYIVY3NvZC1kZS51ZmNvbnRlbnQuY29tghVjc29kLWVzLnVmY29u
dGVudC5jb22CFWNzb2QtZnIudWZjb250ZW50LmNvbYIVY3NvZC1pdC51ZmNvbnRl
bnQuY29tghhkZW1hbmRqdW1wLnVmY29udGVudC5jb22CFWRlbW9rYXQudWZjb250
ZW50LmNvbYIWZG9ja2VyLnJlbGV2YW50aXplLmNvbYIVZG90ZGF0YS51ZmNvbnRl
bnQuY29tghlkdW9zZWN1cml0eS51ZmNvbnRlbnQuY29tghVlbnZpc3RhLnVmY29u
dGVudC5jb22CHGZlLXNlY29uZGFyeS5yZWxldmFudGl6ZS5jb22CGGZlLXRoZW1l
LnJlbGV2YW50aXplLmNvbYISZmUucmVsZXZhbnRpemUuY29tghZmaXZldHJhbi51
ZmNvbnRlbnQuY29tghdmb3J0aW5ldDIudWZjb250ZW50LmNvbYIYZm9ydGluZXRp
dC51ZmNvbnRlbnQuY29tghhmb3J0aW5ldGpwLnVmY29udGVudC5jb22CGmZvcnRp
bmV0c2luZy51ZmNvbnRlbnQuY29tghhmb3J0aW5ldHNwLnVmY29udGVudC5jb22C
FWhlYWx0aHgudWZjb250ZW50LmNvbYIUaHViLmVtc2RpZ2l0YWwuY28uemGCEmh1
Yi5lbnJvbGxtZW50Lm9yZ4IWaW1hZ2luaXQudWZjb250ZW50LmNvbYIaaW5zaWdo
dHMuY2FyZWVyYnVpbGRlci5jb22CFWluc2lnaHRzLnBlcnNvbml2LmNvbYIUamFw
YW5odWIucGFyZXhlbC5jb22CF2twYW9ubGluZS51ZmNvbnRlbnQuY29tghZsZXNz
b25seS51ZmNvbnRlbnQuY29tghRsb2dkbmEudWZjb250ZW50LmNvbYIcbmF0aGFu
ZHVubGVhdnkudWZjb250ZW50LmNvbYIbcGFyZXhlbGhlYWRlci51ZmNvbnRlbnQu
Y29tghlwYXJ0bmVybmV3cy51ZmNvbnRlbnQuY29tghVwdXJld2ViLnVmY29udGVu
dC5jb22CF3JhaW5mb2N1cy51ZmNvbnRlbnQuY29tghRyYW5kM2QudWZjb250ZW50
LmNvbYIWcmVzb3VyY2VzLmVjb3ZhZGlzLmNvbYIkcmVzb3VyY2VzLmZpcnN0Y2Fw
aXRvbGNvbnN1bHRpbmcuY29tghJyZXNvdXJjZXMucGlhbm8uaW+CG3Jlc291cmNl
cy5xdW9ydW1zb2Z0d2FyZS5jYYIicmVzb3VyY2VzLnJpZ2h0c291cmNlbWFya2V0
aW5nLmNvbYIdcmVzb3VyY2VzLnNlY3VyaXR5Y29tcGFzcy5jb22CEXJlc291cmNl
cy5zdWtpLmFpghdyZXNvdXJjZXMudmlld3BvaW50LmNvbYIhcm9nZXJzZW50ZXJw
cmlzZS1lbi51ZmNvbnRlbnQuY29tgiFyb2dlcnNlbnRlcnByaXNlLWZyLnVmY29u
dGVudC5jb22CGXJvc3Ntb3JlbGxvLnVmY29udGVudC5jb22CE3NhbjI1NTguY2Ru
dHdyay5jb22CGHNob3V0LXYyLnJlbGV2YW50aXplLmNvbYIbc2hvd2Nhc2Uuc3Bl
YXJtYXJrZXRpbmcuY29tgh5zbWFsbGJ1c2luZXNzLWZyLnVmY29udGVudC5jb22C
FXN5bnRoaW8udWZjb250ZW50LmNvbYIcdC1sdW5ncy1wcm9kLnJlbGV2YW50aXpl
LmNvbYIYdWZhLWVkZ2UucmVsZXZhbnRpemUuY29tght1ZmEtZmlyZWZveC5yZWxl
dmFudGl6ZS5jb22CFnVmYS1pZS5yZWxldmFudGl6ZS5jb22CGnVmYS1zYWZhcmku
cmVsZXZhbnRpemUuY29tghN1ZmEucmVsZXZhbnRpemUuY29tghh3ZWJob29rcy5y
ZWxldmFudGl6ZS5jb22CIHdlbGNvbWVhYm9hcmQuc3BlYXJtYXJrZXRpbmcuY29t
giB3aWxleXNvY2lldHlsZWFkZXIudWZjb250ZW50LmNvbYIWd2lubWFnaWMudWZj
b250ZW50LmNvbYIUd2l2YW55LnVmY29udGVudC5jb22CFXdpdmFueTIudWZjb250
ZW50LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzATBgorBgEEAdZ5
AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv9GN3tS9H3SrnwdWsOcG2KB
IM5iQwL8o1i6qai2sNsTzOn5EvxoCeI/2zldrRRq2UpRJTJueCZi074F3CEewgEI
RQ3c4WS52NAYmumx9FJ9lgFnHTkevNGOdzb/kgRDS0GGW7nDBVzl475gMcztI+7l
txxRKxjsb2UyPSwEOrBRMnO9Dd80xVUYILTG5YCFqdQFHaWLdEs/HXN7y8Fbl0xO
MOfEDS3BWnMrwBhEgUBIFdkVRDk7CW/BpFbd2Pojnzct9FQngCnnn0jfNA7XfZl/
y/7OhrF8DaV3/ODLNuGReEvb4S2f56uAhJpEQho9qTFLGFlUEFMlodTvjVIMpg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fO8MxF7XsJi3Lu5iVpf
9ClbSTMwDYrpYw2Z89CqOtAZBhNOoAqM19iGaLfob8zkje30WN835LUJjaBRmHbp
iAak6I8RVj8mgyR8CwybS3oVhXYzJxgWRXXyMs7+JjBnBDiWqfSPsGjx51gz3CxB
ToY3MF4fj2eyx1+NFhnWBehzaVcNNKUzjJ+KSOvZzsWEfXJjw2sv4TuF82GaEnms
YECUKZoDc2ZJlQg86bDrdjjLlvMYEZCMmLC/p03FeiXj0229Q7+xPplaFHEELxja
jXUVFW7w6lRJjuNFqKwOvWM2UvgoWOeE97RJTXPPblLvqWOvF++60BwI292iiHHH
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380296846380655237513039994078595142989031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-29 14:59:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-27 14:59:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san2558.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28018855681608054927130641727455245640535497300069064683082683557554182840892689980034370149322050454693813257403536722528140615037305787794041119133603567064018481707722324930935406235551211965807980058154151265369169321497611010256950294887813836688293399404468328178772253638971870343557973251720909566716924143076661237257246358645266827646577842121275391185256046534800824295837369463925408968893341449780293172034899130957456408957944648618001932715464079225536111243813521434868313993708709548899803649286676094762122728313951929056818303469180470835483362404087686126637640290467943079485286186032113510369261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9655ccd00746a8e0e143e02ac43e91cf2003349
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2196 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abm.quarry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2-group1.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2-group2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2-group3.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2-group4.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascent.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascented.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beready.fortinet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bim360resources.autodesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotech.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.swedish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canucks.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.spearmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructible.trimble.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructible.trimble.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group1.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group3.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-group4.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornerstonetest.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csod-de.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csod-es.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csod-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csod-it.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandjump.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demokat.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docker.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotdata.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duosecurity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envista.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe-secondary.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe-theme.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivetran.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinet2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinetit.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinetjp.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinetsing.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortinetsp.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthx.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.emsdigital.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.enrollment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginit.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.careerbuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.personiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanhub.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpaonline.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessonly.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logdna.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nathandunleavy.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parexelheader.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnernews.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureweb.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainfocus.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rand3d.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.ecovadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.firstcapitolconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.piano.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.quorumsoftware.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.rightsourcemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.securitycompass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.suki.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.viewpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogersenterprise-en.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogersenterprise-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rossmorello.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2558.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shout-v2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcase.spearmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusiness-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synthio.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-lungs-prod.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-edge.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-firefox.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-ie.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-safari.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhooks.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomeaboard.spearmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wileysocietyleader.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winmagic.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wivany.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wivany2.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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