USDGR0LYCPOOL01.aramarkuc.net

- ARAMARK -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6a:21:47:74:6e:d4:05:a8:00:00:00:00:50:ed:ac:7d was issued on by Entrust, Inc..

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ARAMARK

Organization: ARAMARK
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:21:47:74:6e:d4:05:a8:00:00:00:00:50:ed:ac:7d
Serial Number (int): 141070962625381112827799993552072453245
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b3:ff:91:86:31:c3:79:3b:04:d9:fb:60:6d:ff:48:e8:f6:ec:e7:74
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ac:14:32:03:5a:c2:56:37:8d:f6:22:2e:44:7b:db:91:4a:ae:db:e3
Fingerprint (sha256): 78:c2:39:48:d4:f0:ea:91:12:8a:c4:1f:51:5f:34:57:8b:f9:68:5e:dd:aa:a8:81:43:13:dc:8d:8b:da:57:2a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate USDGR0LYCPOOL01.aramarkuc.net

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for USDGR0LYCPOOL01.aramarkuc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

USDGR0LYCPOOL01.aramarkuc.net
sip.1st-fresh.com
sip.aramark.be
sip.aramark.cl
sip.aramark.ca
sip.aramark.co.uk
sip.aramark.ie
sip.aramark.com
sip.aramark.cn
sip.aramark.com.ar
sip.aramark.es
sip.ipsrebates.com
sip.hpsionline.com
sip.westernfirstaid.com
sip.avendra.com
sip.ameripride.com
sip.canadianlinen.com
sip.aramark.lu
sip.aramark.de
sip.aramark.fr
USDGR0LYC20.fss.aramark.com
lync.aramark.net
meet.ipsrebates.com
meet.hpsionline.com
meet.westernfirstaid.com
meet.avendra.com
meet.ameripride.com
meet.canadianlinen.com
meet.aramark.lu
meet.aramark.de
meet.aramark.fr
DGRLSWEB.aramarkuc.net
LyncdiscoverInternal.1st-fresh.com
LyncdiscoverInternal.aramark.be
LyncdiscoverInternal.aramark.cl
LyncdiscoverInternal.aramark.ca
LyncdiscoverInternal.aramark.co.uk
LyncdiscoverInternal.aramark.ie
LyncdiscoverInternal.aramark.com
LyncdiscoverInternal.aramark.cn
LyncdiscoverInternal.aramark.com.ar
LyncdiscoverInternal.aramark.es
LyncdiscoverInternal.ipsrebates.com
LyncdiscoverInternal.hpsionline.com
LyncdiscoverInternal.westernfirstaid.com
LyncdiscoverInternal.avendra.com
LyncdiscoverInternal.ameripride.com
LyncdiscoverInternal.canadianlinen.com
LyncdiscoverInternal.aramark.lu
LyncdiscoverInternal.aramark.de
LyncdiscoverInternal.aramark.fr
DGRLSWEBEXT.aramarkuc.net
Lyncdiscover.1st-fresh.com
Lyncdiscover.aramark.be
Lyncdiscover.aramark.cl
Lyncdiscover.aramark.ca
Lyncdiscover.aramark.co.uk
Lyncdiscover.aramark.ie
Lyncdiscover.aramark.com
Lyncdiscover.aramark.cn
Lyncdiscover.aramark.com.ar
Lyncdiscover.aramark.es
Lyncdiscover.ipsrebates.com
Lyncdiscover.hpsionline.com
Lyncdiscover.westernfirstaid.com
Lyncdiscover.avendra.com
Lyncdiscover.ameripride.com
Lyncdiscover.canadianlinen.com
Lyncdiscover.aramark.lu
Lyncdiscover.aramark.de
Lyncdiscover.aramark.fr
USDGR0LYC23.fss.aramark.com
USDGR0LYC22.fss.aramark.com
USDGR0LYC21.fss.aramark.com
USDGR0LYC24.fss.aramark.com

Other certificates including the domain name aramarkuc.net

(limited to 100 certificates)
dgrowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCEDGE01.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
webmail.aramark.com
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
phlowasext.aramarkuc.net
DGRsip.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
webmail.aramark.com
DGRsip.aramarkuc.net
DGRsip.aramarkuc.net
webmail.aramark.com
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
phlowasext.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USDGR0LYCMED01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net
USDGR0LYCEDGE01.aramarkuc.net
USPHL0LYCPOOL01.aramarkuc.net
PHLSIP.aramarkuc.net
dgrowas.aramarkuc.net
webmail.aramark.com
USPHL0LYCPOOL01.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
DGRsip.aramarkuc.net
PHLSIP.aramarkuc.net
PHLSIP.aramarkuc.net

Certificate

The complete raw certificate details for USDGR0LYCPOOL01.aramarkuc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR6USEJlZK5AYN1QHXvq
gZfkalJWW/olvehPEvQAMM5EpQHZolxVR2h+bvMc6xhYoDo/lG3Q6jeNJWz6wgo6
jxpHsYdvXkRcs4nVNrhyhtp+y4Aj5ko75/Z2nwYqb279RAQpiXw1cIsRgYZdU38/
UPf02JWpdGiyyUiNee89QXOiZI35wNAiEnS2VtuTjZ98zw9kkR2QLzdxUBPeVI6c
Bi/EJWpymcEsvMd4E1oYyBsF9xrKnUv4DjGKYH2emTuUTkUIepNuxUf+nzmhNnC4
wIG/sDv5mh3u+xPkXhW9b7Yxs0OCaxK9uCDpjuq771JR7mzzoEcPYE6Hk3Ox1Njm
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141070962625381112827799993552072453245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 15:07:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-29 15:37:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ARAMARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USDGR0LYCPOOL01.aramarkuc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21854305938261634437613792212523513806062299514991189989338430775114622808797732609820533685423276432494738346985944945390954733939008489886691820586531677262257769576070020409778181985689610848775497128223223023196962656552579901642096570065590194531343646493339918610715042395973282270802038253986497460177474924865032104983219871108786858797954115686014500191842181041792002508560473340777035811817087540067959454972643990581943445524150098332846535024505594422646816816320994278153412799382318849997882636160440176083035317005610840093866379197961648042557702351399168401456525500964050721346359737193660392466093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1957 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYCPOOL01.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC20.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.aramark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DGRLSWEB.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DGRLSWEBEXT.aramarkuc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.1st-fresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ipsrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.hpsionline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.westernfirstaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.avendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ameripride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.canadianlinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.aramark.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC23.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC22.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC21.fss.aramark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'USDGR0LYC24.fss.aramark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3ff918631c3793b04d9fb606dff48e8f6ece774
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a8e645d0e494245e3ca0b14bd14c686b2695eb689ec9ba6d596c85bc4df0bbafcd4e5b7eba6eb686138c483d8984cefe15ce3dff2e824bfef3315c0a3e20982c0ed01d1cee041d5f7135fddaa57205c3fea9974f32edd2f94c4b3812ff07decd3ec6039238af1737d86da7e0c88966f18fd7adf38c2e60083e3e08f5e75d924783031912eb379176109a819db8725ac902c308dcfbe1d2ed28f6d791d49295986c292506f8580a251c70b88c5263de3ff04d5ca65070ff9e2638c2f524ac471cad10e9ee8d8dab55b22179bbaa4fba7fec354c8f06dd30cfb9d42694e0cbb2b9e8ab9e45acaa3c9ecb50ada607e7c260d933a2c692e42ba2554640e28cc37cff