USPHL0LYCPOOL01.aramarkuc.net

- ARAMARK -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 95:d8:7b:8c:12:be:92:f5:00:00:00:00:50:f9:b6:98 was issued on by Entrust, Inc..

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARAMARK

Organization: ARAMARK
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 95:d8:7b:8c:12:be:92:f5:00:00:00:00:50:f9:b6:98
Serial Number (int): 199179013327521109050369035605584230040
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d5:6b:ac:09:6a:af:a9:6b:85:dc:26:5e:4b:77:bb:f3:c2:13:3e:4a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 91:83:08:11:02:13:76:d9:61:f9:f1:cf:35:60:14:c0:88:8c:d3:1e
Fingerprint (sha256): 6d:a1:9f:55:e9:70:9e:65:b2:d6:3b:f9:d5:4c:10:4e:86:01:12:48:a3:75:dc:4a:68:b8:1c:8a:4e:4f:7b:e0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate USPHL0LYCPOOL01.aramarkuc.net

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for USPHL0LYCPOOL01.aramarkuc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

USPHL0LYCPOOL01.aramarkuc.net
sip.1st-fresh.com
sip.aramark.be
sip.aramark.cl
sip.aramark.ca
sip.aramark.co.uk
sip.aramark.ie
sip.aramark.com
sip.aramark.cn
sip.aramark.com.ar
sip.aramark.es
sip.ipsrebates.com
sip.hpsionline.com
sip.westernfirstaid.com
sip.avendra.com
sip.ameripride.com
sip.canadianlinen.com
sip.aramark.lu
sip.aramark.de
sip.aramark.fr
sip.avoca.com
sip.Lifeworksrestaurantgroup.com
sip.harvesttableculinary.com
USPHL0LYC20.fss.aramark.com
lync.aramark.net
meet.ipsrebates.com
meet.hpsionline.com
meet.westernfirstaid.com
meet.avendra.com
meet.ameripride.com
meet.canadianlinen.com
meet.aramark.lu
meet.aramark.de
meet.aramark.fr
meet.avoca.com
meet.lifeworksrestaurantgroup.com
meet.harvesttableculinary.com
phllsweb.aramarkuc.net
LyncdiscoverInternal.1st-fresh.com
LyncdiscoverInternal.aramark.be
LyncdiscoverInternal.aramark.cl
LyncdiscoverInternal.aramark.ca
LyncdiscoverInternal.aramark.co.uk
LyncdiscoverInternal.aramark.ie
LyncdiscoverInternal.aramark.com
LyncdiscoverInternal.aramark.cn
LyncdiscoverInternal.aramark.com.ar
LyncdiscoverInternal.aramark.es
LyncdiscoverInternal.ipsrebates.com
LyncdiscoverInternal.hpsionline.com
LyncdiscoverInternal.westernfirstaid.com
LyncdiscoverInternal.avendra.com
LyncdiscoverInternal.ameripride.com
LyncdiscoverInternal.canadianlinen.com
LyncdiscoverInternal.aramark.lu
LyncdiscoverInternal.aramark.de
LyncdiscoverInternal.aramark.fr
LyncdiscoverInternal.avoca.com
LyncdiscoverInternal.Lifeworksrestaurantgroup.com
LyncdiscoverInternal.harvesttableculinary.com
PHLLSWEBext.aramarkuc.net
Lyncdiscover.1st-fresh.com
Lyncdiscover.aramark.be
Lyncdiscover.aramark.cl
Lyncdiscover.aramark.ca
Lyncdiscover.aramark.co.uk
Lyncdiscover.aramark.ie
Lyncdiscover.aramark.com
Lyncdiscover.aramark.cn
Lyncdiscover.aramark.com.ar
Lyncdiscover.aramark.es
Lyncdiscover.ipsrebates.com
Lyncdiscover.hpsionline.com
Lyncdiscover.westernfirstaid.com
Lyncdiscover.avendra.com
Lyncdiscover.ameripride.com
Lyncdiscover.canadianlinen.com
Lyncdiscover.aramark.lu
Lyncdiscover.aramark.de
Lyncdiscover.aramark.fr
Lyncdiscover.avoca.com
Lyncdiscover.Lifeworksrestaurantgroup.com
Lyncdiscover.harvesttableculinary.com
usphl0lyc23.fss.aramark.com
usphl0lyc22.fss.aramark.com
usphl0lyc21.fss.aramark.com
usphl0lyc24.fss.aramark.com

Other certificates including the domain name aramarkuc.net

(limited to 100 certificates)
dgrowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCEDGE01.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
phlowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USDGR0LYCMED01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCEDGE01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
dgrowas.aramarkuc.net
webmail.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net

Certificate

The complete raw certificate details for USPHL0LYCPOOL01.aramarkuc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweS4D7xIJ3LiOrfXwZr/
UeiCwrshv4jp1ldAzWLYx6E5HI4ot0jRsSFs8FFnHNpGrE8oknzoeKCjpcu6n+4w
4JbK9lNQRvhHeVGHpSMEw80N5OBImb1TnElwMPgi2FteBo/Xz6mtuBOf+U3KKvRm
469Q9zDygFa6ngNFsQDrDXpAsUYnbwuML/JRzPrRR90ykM6tnido8pILIc1xUvfE
+RReRg+55Va/CRaesaSriLL7d8r3ouLSgmslcA+vCcBlfOe2ismXrDO84zhQWekx
C2jPY4X+u5nFaOPkDJ0OPp1ocdpJXkfXfSjTCnPs3MXbxmEc5D1HcbTG2UvoSuCL
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199179013327521109050369035605584230040
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 14:52:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 15:22:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USPHL0LYCPOOL01.aramarkuc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24476778396044301142835917066156730217524931981585618988830452386854232899306855288270549631593166489869577197708417432371556357846404984676420300037405617234607457616269250443071115856317055330426527617696784280156733660774379113511481042287581161665184669151855198536587527026426357763409738315596603347024072544390098818331365644542867926743766244267016348229093221514519262873913259088929206871147378497019745408325898133983295443900448654495711679654997574246487784516362833748559316810574403614051851895210968248293269700332919947909686868080004686474624971590416333540403228599633617110832200382939238590614487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2354 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USPHL0LYCPOOL01.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USPHL0LYC20.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.aramark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phllsweb.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PHLLSWEBext.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Lifeworksrestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.harvesttableculinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphl0lyc23.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphl0lyc22.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphl0lyc21.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphl0lyc24.fss.aramark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d56bac096aafa96b85dc265e4b77bbf3c2133e4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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