san1348.cdntwrk.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:60:81:d4:e3:63:9e:c8:59:03:85:e0:a7:41:28:0c:09:b1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san1348.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:60:81:d4:e3:63:9e:c8:59:03:85:e0:a7:41:28:0c:09:b1
Serial Number (int): 381288826741841051564954055105978372458929
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 91:94:b4:c6:2d:2d:01:93:04:b8:fe:03:7a:ad:0a:49:e1:02:d3:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 93:33:32:99:2b:04:cc:65:9b:0b:50:7e:67:40:ac:a7:f9:06:2c:40
Fingerprint (sha256): 76:44:b5:4b:e7:3c:df:ca:2a:78:ba:35:91:79:f7:6c:39:0d:37:58:23:e6:32:c1:79:a1:aa:a3:b9:81:b0:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate san1348.cdntwrk.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1348.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3mcanadasafety.ufcontent.com
academy.dynamicsignal.com
af.ufcontent.com
assetmanagement.seic.com
assets.softwareag.com
aternity.ufcontent.com
blog.shivnadarfoundation.org
blog.trendkite.com
boomtownroi.ufcontent.com
canadianadvisoryboard.equifax.ca
catalog.walpoleoutdoors.com
community.chorus.ai
connect.ykknorthamerica.com
content.venasolutions.com
demohub.brainrider.com
denaliusa.ufcontent.com
dev17331wed2prod.relevantize.com
discover.cph.org
discover.nwea.org
doeren.ufcontent.com
executiveroundtable.equifax.ca
explore.execu-search.com
explore.precisionlender.com
explore.versionone.com
fuelforthought.windstreambusiness.com
gihcentral.medtronic.com
go.axway.com
healthresources.aon.com
hi.healthyindoors.com
hub.55c44add5b9d4fcea2df6606cb67a24f.relevantize.com
hub.associaonline.com
hub.execu-search.com
hub.kvvinc.co.za
hub.mbaco.com
hub.phonatics.co.za
hub.resourceadvisor.com
hub.schellmanco.com
hub.the-cma.org
hub.thecma.ca
hub.ykknorthamerica.com
ideas.oakridgeinvest.com
inside.onedigital.com
jellyvision.ufcontent.com
kentest.ufcontent.com
kvv.ufcontent.com
learn.dealertrack.com
learn.nuaire.com
learn.thebdx.com
learn.thenavisway.com
marketsandmarkets.ufcontent.com
nttglobal.ufcontent.com
omnicell.ufcontent.com
partners.cloudwords.com
partners.zilliant.com
partnerstack.ufcontent.com
quantcast.ufcontent.com
r1rcm.ufcontent.com
read.epgmediallc.com
resources.agilquest.com
resources.aprimo.com
resources.apriori.com
resources.axonify.com
resources.checkmarx.com
resources.cloudwords.com
resources.cockroachlabs.com
resources.concordiatechnology.org
resources.datadrivenmarketing.equifax.com
resources.dealertrack.com
resources.demandgen.com
resources.digitalshadows.com
resources.dowjones.com
resources.easyprojects.net
resources.irdeto.com
resources.kenblanchard.com
resources.lytx.com
resources.nanolumens.com
resources.prometic.com
resources.runzheimer.com
resources.smartlinxsolutions.com
resources.snowflake.net
resources.softwareag.com
resources.sojournsolutions.com
resources.talmix.com
resources.trendkite.com
resources.univeris.com
resources.zaloni.com
resources.zilliant.com
ruby.ufcontent.com
san1348.cdntwrk.com
showagroup.ufcontent.com
shower-time.jonlaba.com
snaplogic.ufcontent.com
solutions.nwea.org
stackinfra.ufcontent.com
techsmith.ufcontent.com
toolbox.igus.com
trendkite-blog.ufcontent.com
www.embedded-computing.com
www.lalamagdigital.com
zu.zilliant.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san1348.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPDzCCDfegAwIBAgISBGCB1ONjnshZA4Xgp0EoDAmxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDEwMTkxMzQ3MjhaFw0y
MTAxMTcxMzQ3MjhaMB4xHDAaBgNVBAMTE3NhbjEzNDguY2RudHdyay5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1QY5WBlJN/ceiqAPq4d1q5Ix
dZaX40M1E4CiLTdrKMhWV4I7i0LebuoK+hGCOxIAK0g0465xPige6+el85gTKt4L
5sZly5eukNJ0qdgeBdKE5+InbRSclFQKr0fxIR4FptEX5k1t6RBwnfDAvTAxf4kO
y6fT2Shwh128jRjqxPenJvVdO2+Y2cZtIqgAHeih2lQ7ArmsX7dwsTCCpdKadjTx
B8VdIc9dxBKxTy8HzVwc0ORAKTsmVqC294IyZ+zD0tulDVzaWlR74QO9jQatbEJF
sJA1Y69UKcWXCmBy38hFohJSuUTBVmVxkVfP9JGVWoam6w3Q63jnyY0fDHGVAgMB
AAGjggwZMIIMFTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJGUtMYtLQGTBLj+A3qt
CknhAtMeMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wggnOBgNVHREEggnFMIIJwYIcM21jYW5hZGFzYWZldHkudWZjb250
ZW50LmNvbYIZYWNhZGVteS5keW5hbWljc2lnbmFsLmNvbYIQYWYudWZjb250ZW50
LmNvbYIYYXNzZXRtYW5hZ2VtZW50LnNlaWMuY29tghVhc3NldHMuc29mdHdhcmVh
Zy5jb22CFmF0ZXJuaXR5LnVmY29udGVudC5jb22CHGJsb2cuc2hpdm5hZGFyZm91
bmRhdGlvbi5vcmeCEmJsb2cudHJlbmRraXRlLmNvbYIZYm9vbXRvd25yb2kudWZj
b250ZW50LmNvbYIgY2FuYWRpYW5hZHZpc29yeWJvYXJkLmVxdWlmYXguY2GCG2Nh
dGFsb2cud2FscG9sZW91dGRvb3JzLmNvbYITY29tbXVuaXR5LmNob3J1cy5haYIb
Y29ubmVjdC55a2tub3J0aGFtZXJpY2EuY29tghljb250ZW50LnZlbmFzb2x1dGlv
bnMuY29tghZkZW1vaHViLmJyYWlucmlkZXIuY29tghdkZW5hbGl1c2EudWZjb250
ZW50LmNvbYIgZGV2MTczMzF3ZWQycHJvZC5yZWxldmFudGl6ZS5jb22CEGRpc2Nv
dmVyLmNwaC5vcmeCEWRpc2NvdmVyLm53ZWEub3JnghRkb2VyZW4udWZjb250ZW50
LmNvbYIeZXhlY3V0aXZlcm91bmR0YWJsZS5lcXVpZmF4LmNhghhleHBsb3JlLmV4
ZWN1LXNlYXJjaC5jb22CG2V4cGxvcmUucHJlY2lzaW9ubGVuZGVyLmNvbYIWZXhw
bG9yZS52ZXJzaW9ub25lLmNvbYIlZnVlbGZvcnRob3VnaHQud2luZHN0cmVhbWJ1
c2luZXNzLmNvbYIYZ2loY2VudHJhbC5tZWR0cm9uaWMuY29tggxnby5heHdheS5j
b22CF2hlYWx0aHJlc291cmNlcy5hb24uY29tghVoaS5oZWFsdGh5aW5kb29ycy5j
b22CNGh1Yi41NWM0NGFkZDViOWQ0ZmNlYTJkZjY2MDZjYjY3YTI0Zi5yZWxldmFu
dGl6ZS5jb22CFWh1Yi5hc3NvY2lhb25saW5lLmNvbYIUaHViLmV4ZWN1LXNlYXJj
aC5jb22CEGh1Yi5rdnZpbmMuY28uemGCDWh1Yi5tYmFjby5jb22CE2h1Yi5waG9u
YXRpY3MuY28uemGCF2h1Yi5yZXNvdXJjZWFkdmlzb3IuY29tghNodWIuc2NoZWxs
bWFuY28uY29tgg9odWIudGhlLWNtYS5vcmeCDWh1Yi50aGVjbWEuY2GCF2h1Yi55
a2tub3J0aGFtZXJpY2EuY29tghhpZGVhcy5vYWtyaWRnZWludmVzdC5jb22CFWlu
c2lkZS5vbmVkaWdpdGFsLmNvbYIZamVsbHl2aXNpb24udWZjb250ZW50LmNvbYIV
a2VudGVzdC51ZmNvbnRlbnQuY29tghFrdnYudWZjb250ZW50LmNvbYIVbGVhcm4u
ZGVhbGVydHJhY2suY29tghBsZWFybi5udWFpcmUuY29tghBsZWFybi50aGViZHgu
Y29tghVsZWFybi50aGVuYXZpc3dheS5jb22CH21hcmtldHNhbmRtYXJrZXRzLnVm
Y29udGVudC5jb22CF250dGdsb2JhbC51ZmNvbnRlbnQuY29tghZvbW5pY2VsbC51
ZmNvbnRlbnQuY29tghdwYXJ0bmVycy5jbG91ZHdvcmRzLmNvbYIVcGFydG5lcnMu
emlsbGlhbnQuY29tghpwYXJ0bmVyc3RhY2sudWZjb250ZW50LmNvbYIXcXVhbnRj
YXN0LnVmY29udGVudC5jb22CE3IxcmNtLnVmY29udGVudC5jb22CFHJlYWQuZXBn
bWVkaWFsbGMuY29tghdyZXNvdXJjZXMuYWdpbHF1ZXN0LmNvbYIUcmVzb3VyY2Vz
LmFwcmltby5jb22CFXJlc291cmNlcy5hcHJpb3JpLmNvbYIVcmVzb3VyY2VzLmF4
b25pZnkuY29tghdyZXNvdXJjZXMuY2hlY2ttYXJ4LmNvbYIYcmVzb3VyY2VzLmNs
b3Vkd29yZHMuY29tghtyZXNvdXJjZXMuY29ja3JvYWNobGFicy5jb22CIXJlc291
cmNlcy5jb25jb3JkaWF0ZWNobm9sb2d5Lm9yZ4IpcmVzb3VyY2VzLmRhdGFkcml2
ZW5tYXJrZXRpbmcuZXF1aWZheC5jb22CGXJlc291cmNlcy5kZWFsZXJ0cmFjay5j
b22CF3Jlc291cmNlcy5kZW1hbmRnZW4uY29tghxyZXNvdXJjZXMuZGlnaXRhbHNo
YWRvd3MuY29tghZyZXNvdXJjZXMuZG93am9uZXMuY29tghpyZXNvdXJjZXMuZWFz
eXByb2plY3RzLm5ldIIUcmVzb3VyY2VzLmlyZGV0by5jb22CGnJlc291cmNlcy5r
ZW5ibGFuY2hhcmQuY29tghJyZXNvdXJjZXMubHl0eC5jb22CGHJlc291cmNlcy5u
YW5vbHVtZW5zLmNvbYIWcmVzb3VyY2VzLnByb21ldGljLmNvbYIYcmVzb3VyY2Vz
LnJ1bnpoZWltZXIuY29tgiByZXNvdXJjZXMuc21hcnRsaW54c29sdXRpb25zLmNv
bYIXcmVzb3VyY2VzLnNub3dmbGFrZS5uZXSCGHJlc291cmNlcy5zb2Z0d2FyZWFn
LmNvbYIecmVzb3VyY2VzLnNvam91cm5zb2x1dGlvbnMuY29tghRyZXNvdXJjZXMu
dGFsbWl4LmNvbYIXcmVzb3VyY2VzLnRyZW5ka2l0ZS5jb22CFnJlc291cmNlcy51
bml2ZXJpcy5jb22CFHJlc291cmNlcy56YWxvbmkuY29tghZyZXNvdXJjZXMuemls
bGlhbnQuY29tghJydWJ5LnVmY29udGVudC5jb22CE3NhbjEzNDguY2RudHdyay5j
b22CGHNob3dhZ3JvdXAudWZjb250ZW50LmNvbYIXc2hvd2VyLXRpbWUuam9ubGFi
YS5jb22CF3NuYXBsb2dpYy51ZmNvbnRlbnQuY29tghJzb2x1dGlvbnMubndlYS5v
cmeCGHN0YWNraW5mcmEudWZjb250ZW50LmNvbYIXdGVjaHNtaXRoLnVmY29udGVu
dC5jb22CEHRvb2xib3guaWd1cy5jb22CHHRyZW5ka2l0ZS1ibG9nLnVmY29udGVu
dC5jb22CGnd3dy5lbWJlZGRlZC1jb21wdXRpbmcuY29tghZ3d3cubGFsYW1hZ2Rp
Z2l0YWwuY29tgg96dS56aWxsaWFudC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAXVBVFqlAAAEAwBHMEUCICsVozYAYDp/xjOI
VYjjrFgaYjMz0n33gMJo0xGr5VutAiEA7WdwsQTTN8I72e3tpPW9f94iMn5k5zDT
NNwzLkrfcNkAdQB9PvL4j/+IVWgkwsDKnlKJeSvFDngJfy5ql2iZfiLw1wAAAXVB
VFqqAAAEAwBGMEQCIEFG5e+94VgtUT7k+BRlPRSDlJYZYYnkCVpmHBRxWGAGAiB8
htA2/m6bJmq1U9M1+1Rb/URnxaHOAT+HN1HxclbG+DANBgkqhkiG9w0BAQsFAAOC
AQEAmhOpZ6HvLm2iGfKmNLN9XKprGZcyutWwUojO2UJjweo5Tdsl8WlUnMYPEcdF
JNn2/4Ti8a/HTqJ3l7Jcp8rjG0jWKO2DqcsTT8rRDXbbPsgKHLfP6nmyyaHxnNuP
NZvArIa2hJXvxMIEXTmWrDVfk/3EeeW06mBMme/Tmwd7ak0kkHqi2OUNpKWMCIMl
4eY+6HpXAP3uWiGFTBJrzWnw1IA9P6jjkq2Yd57ot8Kf2UEOUcJFcnzvRyEhB/G8
ibQDT/5vELAvHR6CWjMDMBIWnf/5cU2nRSHmoi+hLAz/a8B2VA2xGR+sceNqcxpb
X+hO1Mp5jkSwqcQq5BB+eA297Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9UGOVgZSTf3HoqgD6uH
dauSMXWWl+NDNROAoi03ayjIVleCO4tC3m7qCvoRgjsSACtINOOucT4oHuvnpfOY
EyreC+bGZcuXrpDSdKnYHgXShOfiJ20UnJRUCq9H8SEeBabRF+ZNbekQcJ3wwL0w
MX+JDsun09kocIddvI0Y6sT3pyb1XTtvmNnGbSKoAB3oodpUOwK5rF+3cLEwgqXS
mnY08QfFXSHPXcQSsU8vB81cHNDkQCk7JlagtveCMmfsw9LbpQ1c2lpUe+EDvY0G
rWxCRbCQNWOvVCnFlwpgct/IRaISUrlEwVZlcZFXz/SRlVqGpusN0Ot458mNHwxx
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381288826741841051564954055105978372458929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-19 13:47:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 13:47:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1348.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25226468891866062796358468530837185176382186046532929837824965198064946466757063955628552634686514306026294048289010350128846157247386908424276419684363421844538732512406671599606218154005470626270163902022809120322444971710395163749785199771332537124540325075143653252607956457496502199914609608000730857462521461733585095879917784356014136137782571601336311422293590597802671414381819359723214965769611840581491994181837180073226232661046766156201142195565317507584248382982758603016166834228418414786685823067562347109473236698579421136397946634162296684185329352523624594627596221277542728656485154209358670492053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9194b4c62d2d019304b8fe037aad0a49e102d31e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2501 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3mcanadasafety.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.dynamicsignal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetmanagement.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.softwareag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aternity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.shivnadarfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.trendkite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomtownroi.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianadvisoryboard.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.walpoleoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.chorus.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ykknorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.venasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demohub.brainrider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denaliusa.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev17331wed2prod.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.cph.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doeren.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executiveroundtable.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.execu-search.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.precisionlender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explore.versionone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelforthought.windstreambusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gihcentral.medtronic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.axway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthresources.aon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi.healthyindoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.55c44add5b9d4fcea2df6606cb67a24f.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.associaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.execu-search.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.kvvinc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.mbaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.phonatics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.resourceadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.schellmanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.the-cma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.thecma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.ykknorthamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.oakridgeinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.onedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jellyvision.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentest.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kvv.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.nuaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.thebdx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.thenavisway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketsandmarkets.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nttglobal.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnicell.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.zilliant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerstack.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantcast.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1rcm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read.epgmediallc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.agilquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.aprimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.apriori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.axonify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.checkmarx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cloudwords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cockroachlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.concordiatechnology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.datadrivenmarketing.equifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dealertrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.demandgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.digitalshadows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.easyprojects.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.irdeto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.kenblanchard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.lytx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.nanolumens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.prometic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.runzheimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.smartlinxsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.snowflake.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.softwareag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.sojournsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.talmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.trendkite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.univeris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.zaloni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.zilliant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruby.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1348.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showagroup.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shower-time.jonlaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snaplogic.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.nwea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stackinfra.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techsmith.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolbox.igus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendkite-blog.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embedded-computing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lalamagdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zu.zilliant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017541545aa5000004030047304502202b15a33600603a7fc633885588e3ac581a623333d27df780c268d311abe55bad022100ed6770b104d337c23bd9ededa4f5bd7fde22327e64e730d334dc332e4adf70d90075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017541545aaa000004030046304402204146e5efbde1582d513ee4f814653d14839496196189e4095a661c147158600602207c86d036fe6e9b266ab553d335fb545bfd4467c5a1ce013f873751f17256c6f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a13a967a1ef2e6da219f2a634b37d5caa6b199732bad5b05288ced94263c1ea394ddb25f169549cc60f11c74524d9f6ff84e2f1afc74ea27797b25ca7cae31b48d628ed83a9cb134fcad10d76db3ec80a1cb7cfea79b2c9a1f19cdb8f359bc0ac86b68495efc4c2045d3996ac355f93fdc479e5b4ea604c99efd39b077b6a4d24907aa2d8e50da4a58c088325e1e63ee87a5700fdee5a21854c126bcd69f0d4803d3fa8e392ad98779ee8b7c29fd9410e51c245727cef47212107f1bc89b4034ffe6f10b02f1d1e825a33033012169dfff9714da74521e6a22fa12c0cff6bc076540db1191fac71e36a731a5b5fe84ed4ca798e44b0a9c42ae4107e780dbded