content.aimatch.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c0:43:50:5f:27:dc:17:4e:0a:9a:22:6e:e4:09:e6:bf:22 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content.aimatch.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:43:50:5f:27:dc:17:4e:0a:9a:22:6e:e4:09:e6:bf:22
Serial Number (int): 413872833765314369282118066308628991098658
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:29:7c:0e:9a:03:96:a1:48:69:cd:d2:7d:1c:4c:52:d7:8a:43:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2c:3e:98:97:6c:2f:a9:2c:64:ac:25:7d:1a:3d:f4:c5:63:e6:c8:17
Fingerprint (sha256): 80:d1:da:be:eb:05:0a:dc:c5:66:75:db:61:a9:f7:66:e8:2a:64:42:96:ba:ad:a4:bb:c8:63:86:86:ca:16:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate content.aimatch.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content.aimatch.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canary-content.360match.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.at
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicc1ust.cxtrvl.com
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.csob.sk
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.infosquaregroup.com
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.stoloto.ru
content-ci360.telia.ee
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.24.hu
content.aimatch.com
content.dna360.scholastic.com
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
usincm-content.mktg.sas.com

Other certificates including the domain name aimatch.com

(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com

Certificate

The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMN2m5bY/62VcmNX+Ckn
Ksx0YLDSwzbIJHS7/dgAKhQqtaIGpSZQkdOOUObL+8ALqLZYCw4UMdlFMcHpQKvz
YVz2vsAqHoHG2X24ElBBkp1egOkLpJO1UehbHCK8DPPsHEUEIEGZWTuZOj/Dacd1
PqoikMvYa2ySfJ3kB/8Ue7jQhbWhjicE+GMnCqfJRrzHdegZE6MCmt//jvo6DGNC
TJRfaZdxMQCXgct1lcllnaMlhgS+g0cOie3jC3OmXzDUH63mZC4x0GZqbetJzSeO
uexJokQYn8DFPTaKSmowXeQEGDEFWPpekUuX7BgsAcih0OXmhHHeGy76rUvdqmmL
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413872833765314369282118066308628991098658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 22:58:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 22:58:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21304421785625510960879238650883385894071056797029252406088016273288358663489528501614899289904141549860190316367881552156693758087832412618246631072977023180741574854964565667626811939784944145704590887838450577543999035015832648072290019971466760422098532034103058815382395629858084223683605970655893972569483412365206382708738890216736012419518950861329618576974609716396988298730110263592300660925723975181646818942938958690124701318062023885807791347395222237123681542619648518015552701146994677394163492423166366592804284903637084614874187301839272317411502279460616235457104263373383154438366785070896975023083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e297c0e9a0396a14869cdd27d1c4c52d78a43a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1629 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-content.360match.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicntn.produbanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.mojadm.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc1ust.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicolusp.cxtrvl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-at3.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-nonprod.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.altibox.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.coopforsikringer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.csob.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.elanyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.footbelsite-acc.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.frankfurt-airport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.generali.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.idaten.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.infosquaregroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.kiwi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.knvb.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.magazine.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.marketing.officedepot.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.meny.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.paulfredrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.rbfa.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.stoloto.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.telia.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.topdanmark.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.trumf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.uscellular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.worldwildlife.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientd-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientp-ci360.wafasalaf.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-test-ci360.nature.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.24.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dna360.scholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mktg.sas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.odt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscontent.morningstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticcontent.mycwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-content.mktg.sas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c0d8b1a362267cee5323d7feac28b8478dca4fb1433e02f7325df684097bdc797fddb7efcccb399078f36b40656ce23d96991b487402fb2aa75f5578ac0284d739ac1acd900cb7481a5be9a61a01f71d02865bd645749ae39aca8e9d673eae2c4dc12c23121f5d081c472d7cdec9810fe01e202f8dcc3956856640242c46cdbd063e943539f508500cefa69a777669800cedf0d44f66ff902a2d145d5e82c4c676a54a89e36916bb9ae89e65ce0c8b4f2a72cc1f9f0248ae386938935b4d80a3bb9d55fca09df7e0f091d3b63e11a21f6053ff36b29c6d6202dd3e6edb2327cc1b1cee2cba5b8b3bfe4be2a7b7479a7448cdaa6079fa23a9d163d5b4cf3ce3e