www.vantiv.com

- Vantiv, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 25:3c:62:bc:ad:0a:98:28:00:00:00:00:50:d9:77:2a was issued on by Entrust, Inc..

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vantiv, Inc

Organization: Vantiv, Inc
Organization unit: Information Technology
State / Province: Ohio
Locality: Symmes TWP
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:3c:62:bc:ad:0a:98:28:00:00:00:00:50:d9:77:2a
Serial Number (int): 49494976280143401995413707743959807786
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 18:c5:47:69:d1:db:1c:28:ea:35:9f:5c:8c:12:f7:8f:2b:d3:9f:d4
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 53:f7:0c:19:42:3a:55:9d:91:2a:8d:ca:cd:0d:8c:6d:78:c2:83:fa
Fingerprint (sha256): 73:15:1e:11:3a:35:fc:a9:0f:a5:af:74:1b:75:10:02:5c:ba:d3:ca:05:66:42:48:da:63:b0:ec:de:bd:91:4a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.vantiv.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vantiv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vantiv.com
vantiv.com
qa-www.vantivpartnerportal.com
test-www.vantivpartnerportal.com
www.rabobankmerchantservices.com
qa-www.rabobankmerchantservices.com
rabobankmerchantservices.com
test-www.rabobankmerchantservices.com
qa-www.umpquabankpaymentsolutions.com
greatsouthernbankpaymentsolutions.com
www.greatsouthernbankpaymentsolutions.com
test-www.umpquabankpaymentsolutions.com
test-www.greatsouthernbankpaymentsolutions.com
qa-www.greatsouthernbankpaymentsolutions.com
qa-www.hometrustpaymentsolutions.com
test-www.hometrustpaymentsolutions.com
communitytrustpaymentsolutions.com
qa-www.communitytrustpaymentsolutions.com
www.communitytrustpaymentsolutions.com
test-www.communitytrustpaymentsolutions.com
qa-www.buseypaymentsolutions.com
test-www.buseypaymentsolutions.com
vantiventertainment.com
qa-www.vantiventertainment.com
test-www.vantiventertainment.com
www.vantiventertainment.com
vantivpartnerportal.com
qa-www.peoplesunitedms.com
www.umpquabankpaymentsolutions.com
test-www.peoplesunitedms.com
peoplesunitedms.com
umpquabankpaymentsolutions.com
qa-www.easternbankpaymentsolutions.com
qa-brandzone.vantiv.com
test-brandzone.vantiv.com
test-marketing.vantiv.com
marketing.vantiv.com
qa-marketing.vantiv.com
qa-clientconnection.vantiv.com
iq.vantiv.com
qa-iq.vantiv.com
www.vantivpaymentsolutions.com
test-iq.vantiv.com
vantivpaymentsolutions.com
www.buseypaymentsolutions.com
postoday.com
www.postoday.com
test-www.postoday.com
qa-www.postoday.com
test-www.npcmerchantsalesacademy.com
qa-www.npc.net
www.jeanienetwork.com
qa-www.jeanienetwork.com
test-www.jeanienetwork.com
test-www.ftpsllc.com
www.vantivpartnerportal.com
easternbankpaymentsolutions.com
hometrustpaymentsolutions.com
www.hometrustpaymentsolutions.com
brandzone.vantiv.com
login.vantiv.com
clientconnection.vantiv.com
buseypaymentsolutions.com
test-www.vantivpaymentsolutions.com
npcmerchantsalesacademy.com
test-www.vantiv.com
www.npcmerchantsalesacademy.com
test-www.npc.net
qa-www.ftpsllc.com
www.peoplesunitedms.com
test-www.easternbankpaymentsolutions.com
qa-login.vantiv.com
test-login.vantiv.com
qa-www.vantivpaymentsolutions.com
qa-www.npcmerchantsalesacademy.com
www.ftpsllc.com
www.easternbankpaymentsolutions.com
www.clientconnection.vantiv.com
test-clientconnection.vantiv.com
jeanienetwork.com
www.npc.net
ftpsllc.com
qa-www.vantiv.com

Other certificates including the domain name vantiv.com

(limited to 100 certificates)
vanity3.lithium.com
pubsubdev.vantiv.com
mobimoney.vantiv.com
tripos.vantiv.com
eps.vantiv.com
apis.stage.vantiv.com
testentrust1.vantiv.com
5755424754106368-fe2.pantheonsite.io
ws-cert.vantiv.com
eps.vantiv.com
msg.mobimoney.vantiv.com
ok.vantiv.com
vanity3.jiveon.com
ws.vantiv.com
dev-apideveloper.vantiv.com
chat.vantiv.com
fraudload.vantiv.com
mycheckout.vantiv.com
mobimoney.vantiv.com
vanity3.lithium.com
wsx.vantiv.com
lync-prod.infoftps.com
apis.stage.vantiv.com
secure07.lithium.com
sso-cte.vantiv.com
wss-cert.vantiv.com
vanity3.jiveon.com
wss-cert.vantiv.com
mobimoney.vantiv.com
pubsubuat.vantiv.com
mobimoney.vantiv.com
qa-eps.vantiv.com
clgrapexpe-cluster.corp.vantiv.com
msg.mobimoney.vantiv.com
vanity3.jiveon.com
ip.vantiv.com
mail.vantiv.com
www.vantivpartnerportal.com
clflopexpe-cluster.corp.vantiv.com
cnflop88sbc1.corp.vantiv.com
firaft.vantiv.com
wss-cert.vantiv.com
eps.vantiv.com
uim.vantiv.com
www.vantivpartnerportal.com
mpmm.vantiv.com
prepaidcardcenter.vantiv.com
ws.vantiv.com
www.iq.vantiv.com
triposcert.vantiv.com
access.vantivcorp.com
vantiv.com
mycheckout.vantiv.com
vanity3.jiveon.com
prepaidcardcenter.vantiv.com
apis.cert.vantiv.com
wss-cert.vantiv.com
merchraft.vantiv.com
ppgateway.vantiv.com
triposcert.vantiv.com
vanity3.jiveon.com
info.vantiv.com
prod.ss-4.esauth.vantiv.com
leapfrog-ssl-19.gcs-web.com
vanity3.jiveon.com
mycheckout.vantiv.com
chat.vantiv.com
info.vantiv.com
ok.vantiv.com
leapfrog-ssl-19.gcs-web.com
triposcert.vantiv.com
vanity3.jiveon.com
leapfrog-ssl-19.gcs-web.com
refer.worldpay.com
mobimoney.vantiv.com
www.iq.vantiv.com
uatpmi2.vantiv.com
worldpay.com
test.vantiv.com
apis.stage.vantiv.com
merchantgiftcarddesigner.vantiv.com
leapfrog-ssl-19.gcs-web.com
chat.vantiv.com
lync-prod.infoftps.com
apis.cert.vantiv.com
firaft.vantiv.com
ws.vantiv.com
mail.vantiv.com
mds-authorization.edpc.vantiv.com
www.vantivpartnerportal.com
ok.vantiv.com
mpmm.vantiv.com
merchraft.vantiv.com
tripos.vantiv.com
leapfrog-ssl-19.gcs-web.com
leapfrog-ssl-19.gcs-web.com
leapfrog-ssl-19.gcs-web.com
wssx-cert.vantiv.com
lync-prod.infoftps.com
wss-cert.vantiv.com

Certificate

The complete raw certificate details for www.vantiv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9lpKHZpDSuvUuv1KRPv
VbJuKT/ymH/mGtn+P49xBLjYqG/UUPU2nQy7wgfI3fUH44vcZ9zOo16HjTOzoDLW
DNkWRF9Dx02sikBdsnfUMYIGOah+cOYJllQUNIy1k6lM2P7EadBxdSt7ccsFyhjl
TdlPYvItfclaOlPctWEHwWDs/cxe8/NUAyFrN2xCXgYHHplVdGYjTEnq+7kzz13c
4XoRen4YpkTqK8Gsz9idVC1cQY2fdJVuVJeONoZ3y8YV3nSvmZNp5q//SQqODOL2
KakpUrFciuiGzKs7Z9VCfwqWcL5SXbQPU9vMj4JzrVWuWgUPrNpFOkgZZCKJ9Jrf
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49494976280143401995413707743959807786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-02 18:46:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-08 19:16:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symmes TWP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vantiv, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vantiv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22703865837159330367168644367698643269804367791308263357881432732653397922641404359839910956263984641952244839266454672369770539397586851701260379683618368437057635700336997132351700789140373742064659425700915131037928126403292003338447519987260319438553537820980803364287862518105304445532691627167329067078641296328638227132271233734813773193962329399927303702960556322383981132038351343116673468884857232679858652861850599105720614285070224890708660216111653382497944109919533705147527139422439754728195060111122391464103916565974108766381355279071814722126626963671959353326821604729240540865075066602922551467973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2418 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.vantivpartnerportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.vantivpartnerportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabobankmerchantservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.rabobankmerchantservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabobankmerchantservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.rabobankmerchantservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.umpquabankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatsouthernbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatsouthernbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.umpquabankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.greatsouthernbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.greatsouthernbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.hometrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.hometrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitytrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.communitytrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitytrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.communitytrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.buseypaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.buseypaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantiventertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.vantiventertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.vantiventertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantiventertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantivpartnerportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.peoplesunitedms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umpquabankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.peoplesunitedms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesunitedms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umpquabankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.easternbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-brandzone.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-brandzone.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-marketing.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-marketing.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-clientconnection.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iq.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-iq.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantivpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-iq.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantivpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buseypaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.postoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.postoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.npcmerchantsalesacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.npc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeanienetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.jeanienetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.jeanienetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.ftpsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantivpartnerportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hometrustpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandzone.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientconnection.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buseypaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.vantivpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcmerchantsalesacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npcmerchantsalesacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.npc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.ftpsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplesunitedms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.easternbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-login.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-login.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.vantivpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.npcmerchantsalesacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ftpsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easternbankpaymentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clientconnection.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clientconnection.vantiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeanienetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftpsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-www.vantiv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18c54769d1db1c28ea359f5c8c12f78f2bd39fd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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