content.aimatch.com
Issued by R3
About this certificate
This digital certificate with serial number 04:c0:43:50:5f:27:dc:17:4e:0a:9a:22:6e:e4:09:e6:bf:22 was issued on by Let's Encrypt.
With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=content.aimatch.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c0:43:50:5f:27:dc:17:4e:0a:9a:22:6e:e4:09:e6:bf:22Serial Number (int): 413872833765314369282118066308628991098658
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6e:29:7c:0e:9a:03:96:a1:48:69:cd:d2:7d:1c:4c:52:d7:8a:43:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2c:3e:98:97:6c:2f:a9:2c:64:ac:25:7d:1a:3d:f4:c5:63:e6:c8:17
Fingerprint (sha256): 80:d1:da:be:eb:05:0a:dc:c5:66:75:db:61:a9:f7:66:e8:2a:64:42:96:ba:ad:a4:bb:c8:63:86:86:ca:16:c9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate content.aimatch.com
64
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for content.aimatch.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canary-content.360match.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.at
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicc1ust.cxtrvl.com
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.csob.sk
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.infosquaregroup.com
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.stoloto.ru
content-ci360.telia.ee
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.24.hu
content.aimatch.com
content.dna360.scholastic.com
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
usincm-content.mktg.sas.com
cicntn.produbanco.com
con.mm.dm-drogeriemarkt.at
con.mm.dm-drogeriemarkt.ba
con.mm.dm-drogeriemarkt.bg
con.mm.dm-drogeriemarkt.it
con.mm.dm-drogeriemarkt.ro
con.mm.dm.at
con.mm.dm.cz
con.mm.dm.de
con.mm.dm.hr
con.mm.dm.hu
con.mm.dm.mk
con.mm.dm.rs
con.mm.dm.si
con.mm.mojadm.sk
con.t.mm.dm-drogeriemarkt.at
con.t.mm.dm-drogeriemarkt.bg
con.t.mm.dm.at
con.t.mm.dm.cz
con.t.mm.dm.de
con.t.mm.dm.hr
con.t.mm.dm.hu
con.t.mm.dm.si
con.t.mm.mojadm.sk
content-360-cicc1ust.cxtrvl.com
content-360-cicolusp.cxtrvl.com
content-ci360-at3.altibox.no
content-ci360-nonprod.uscellular.com
content-ci360.altibox.no
content-ci360.clubpremier.com
content-ci360.coopforsikringer.dk
content-ci360.csob.sk
content-ci360.elanyo.com
content-ci360.footbelsite-acc.rbfa.be
content-ci360.frankfurt-airport.com
content-ci360.generali.sk
content-ci360.idaten.ne.jp
content-ci360.infosquaregroup.com
content-ci360.kiwi.no
content-ci360.knvb.nl
content-ci360.magazine.nl
content-ci360.marketing.officedepot.eu
content-ci360.meny.no
content-ci360.nature.org
content-ci360.paulfredrick.com
content-ci360.rbfa.be
content-ci360.stoloto.ru
content-ci360.telia.ee
content-ci360.topdanmark.dk
content-ci360.trumf.no
content-ci360.uscellular.com
content-ci360.worldwildlife.org
content-kclientd-ci360.wafasalaf.ma
content-kclientp-ci360.wafasalaf.ma
content-test-ci360.nature.org
content.24.hu
content.aimatch.com
content.dna360.scholastic.com
content.mktg.sas.com
content.odt.co.nz
mscontent.morningstar.com
staticcontent.mycwt.com
usincm-content.mktg.sas.com
Other certificates including the domain name aimatch.com
(limited to 100 certificates)
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.dev.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
*.dev.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
content.aimatch.com
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
cdn.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
*.aimatch.com
*.aimatch.com
*.dev.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
content.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
foghorn.dev.aimatch.com
*.aimatch.com
*.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
content.dev.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.aimatch.com
*.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
*.aimatch.com
content.dev.aimatch.com
*.aimatch.com
content.aimatch.com
content.aimatch.com
content.aimatch.com
tier4-usw2.oregon.delivery.dev.aimatch.net
*.dev.aimatch.com
Certificate
The complete raw certificate details for content.aimatch.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKgzCCCWugAwIBAgISBMBDUF8n3BdOCpoibuQJ5r8iMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMTAyMTEyMjU4NTFaFw0yMTA1MTIyMjU4NTFaMB4xHDAaBgNVBAMT E2NvbnRlbnQuYWltYXRjaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCow3abltj/rZVyY1f4KScqzHRgsNLDNsgkdLv92AAqFCq1ogalJlCR045Q 5sv7wAuotlgLDhQx2UUxwelAq/NhXPa+wCoegcbZfbgSUEGSnV6A6Qukk7VR6Fsc IrwM8+wcRQQgQZlZO5k6P8Npx3U+qiKQy9hrbJJ8neQH/xR7uNCFtaGOJwT4YycK p8lGvMd16BkTowKa3/+O+joMY0JMlF9pl3ExAJeBy3WVyWWdoyWGBL6DRw6J7eML c6ZfMNQfreZkLjHQZmpt60nNJ4657EmiRBifwMU9NopKajBd5AQYMQVY+l6RS5fs GCwByKHQ5eaEcd4bLvqtS92qaYvrAgMBAAGjggelMIIHoTAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFG4pfA6aA5ahSGnN0n0cTFLXikOhMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMIIGZgYDVR0RBIIGXTCCBlmCJGNhbmFyeS1jb250ZW50LjM2MG1hdGNo Lm1rdGcuc2FzLmNvbYIVY2ljbnRuLnByb2R1YmFuY28uY29tghpjb24ubW0uZG0t ZHJvZ2VyaWVtYXJrdC5hdIIaY29uLm1tLmRtLWRyb2dlcmllbWFya3QuYmGCGmNv bi5tbS5kbS1kcm9nZXJpZW1hcmt0LmJnghpjb24ubW0uZG0tZHJvZ2VyaWVtYXJr dC5pdIIaY29uLm1tLmRtLWRyb2dlcmllbWFya3Qucm+CDGNvbi5tbS5kbS5hdIIM Y29uLm1tLmRtLmN6ggxjb24ubW0uZG0uZGWCDGNvbi5tbS5kbS5ocoIMY29uLm1t LmRtLmh1ggxjb24ubW0uZG0ubWuCDGNvbi5tbS5kbS5yc4IMY29uLm1tLmRtLnNp ghBjb24ubW0ubW9qYWRtLnNrghxjb24udC5tbS5kbS1kcm9nZXJpZW1hcmt0LmF0 ghxjb24udC5tbS5kbS1kcm9nZXJpZW1hcmt0LmJngg5jb24udC5tbS5kbS5hdIIO Y29uLnQubW0uZG0uY3qCDmNvbi50Lm1tLmRtLmRlgg5jb24udC5tbS5kbS5ocoIO Y29uLnQubW0uZG0uaHWCDmNvbi50Lm1tLmRtLnNpghJjb24udC5tbS5tb2phZG0u c2uCH2NvbnRlbnQtMzYwLWNpY2MxdXN0LmN4dHJ2bC5jb22CH2NvbnRlbnQtMzYw LWNpY29sdXNwLmN4dHJ2bC5jb22CHGNvbnRlbnQtY2kzNjAtYXQzLmFsdGlib3gu bm+CJGNvbnRlbnQtY2kzNjAtbm9ucHJvZC51c2NlbGx1bGFyLmNvbYIYY29udGVu dC1jaTM2MC5hbHRpYm94Lm5vgh1jb250ZW50LWNpMzYwLmNsdWJwcmVtaWVyLmNv bYIhY29udGVudC1jaTM2MC5jb29wZm9yc2lrcmluZ2VyLmRrghVjb250ZW50LWNp MzYwLmNzb2Iuc2uCGGNvbnRlbnQtY2kzNjAuZWxhbnlvLmNvbYIlY29udGVudC1j aTM2MC5mb290YmVsc2l0ZS1hY2MucmJmYS5iZYIjY29udGVudC1jaTM2MC5mcmFu a2Z1cnQtYWlycG9ydC5jb22CGWNvbnRlbnQtY2kzNjAuZ2VuZXJhbGkuc2uCGmNv bnRlbnQtY2kzNjAuaWRhdGVuLm5lLmpwgiFjb250ZW50LWNpMzYwLmluZm9zcXVh cmVncm91cC5jb22CFWNvbnRlbnQtY2kzNjAua2l3aS5ub4IVY29udGVudC1jaTM2 MC5rbnZiLm5sghljb250ZW50LWNpMzYwLm1hZ2F6aW5lLm5sgiZjb250ZW50LWNp MzYwLm1hcmtldGluZy5vZmZpY2VkZXBvdC5ldYIVY29udGVudC1jaTM2MC5tZW55 Lm5vghhjb250ZW50LWNpMzYwLm5hdHVyZS5vcmeCHmNvbnRlbnQtY2kzNjAucGF1 bGZyZWRyaWNrLmNvbYIVY29udGVudC1jaTM2MC5yYmZhLmJlghhjb250ZW50LWNp MzYwLnN0b2xvdG8ucnWCFmNvbnRlbnQtY2kzNjAudGVsaWEuZWWCG2NvbnRlbnQt Y2kzNjAudG9wZGFubWFyay5ka4IWY29udGVudC1jaTM2MC50cnVtZi5ub4IcY29u dGVudC1jaTM2MC51c2NlbGx1bGFyLmNvbYIfY29udGVudC1jaTM2MC53b3JsZHdp bGRsaWZlLm9yZ4IjY29udGVudC1rY2xpZW50ZC1jaTM2MC53YWZhc2FsYWYubWGC I2NvbnRlbnQta2NsaWVudHAtY2kzNjAud2FmYXNhbGFmLm1hgh1jb250ZW50LXRl c3QtY2kzNjAubmF0dXJlLm9yZ4INY29udGVudC4yNC5odYITY29udGVudC5haW1h dGNoLmNvbYIdY29udGVudC5kbmEzNjAuc2Nob2xhc3RpYy5jb22CFGNvbnRlbnQu bWt0Zy5zYXMuY29tghFjb250ZW50Lm9kdC5jby5ueoIZbXNjb250ZW50Lm1vcm5p bmdzdGFyLmNvbYIXc3RhdGljY29udGVudC5teWN3dC5jb22CG3VzaW5jbS1jb250 ZW50Lm1rdGcuc2FzLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzAT BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfA2LGjYiZ87l Mj1/6sKLhHjcpPsUM+AvcyXfaECXvceX/dt+/MyzmQePNrQGVs4j2WmRtIdAL7Kq dfVXisAoTXOawazZAMt0gaW+mmGgH3HQKGW9ZFdJrjmsqOnWc+rixNwSwjEh9dCB xHLXzeyYEP4B4gL43MOVaFZkAkLEbNvQY+lDU59QhQDO+mmnd2aYAM7fDUT2b/kC otFF1egsTGdqVKieNpFrua6J5lzgyLTypyzB+fAkiuOGk4k1tNgKO7nVX8oJ334P CR07Y+EaIfYFP/NrKcbWIC3T5u2yMnzBsc7iy6W4s7/kvip7dHmnRIzapgefojqd Fj1bTPPOPg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMN2m5bY/62VcmNX+Ckn Ksx0YLDSwzbIJHS7/dgAKhQqtaIGpSZQkdOOUObL+8ALqLZYCw4UMdlFMcHpQKvz YVz2vsAqHoHG2X24ElBBkp1egOkLpJO1UehbHCK8DPPsHEUEIEGZWTuZOj/Dacd1 PqoikMvYa2ySfJ3kB/8Ue7jQhbWhjicE+GMnCqfJRrzHdegZE6MCmt//jvo6DGNC TJRfaZdxMQCXgct1lcllnaMlhgS+g0cOie3jC3OmXzDUH63mZC4x0GZqbetJzSeO uexJokQYn8DFPTaKSmowXeQEGDEFWPpekUuX7BgsAcih0OXmhHHeGy76rUvdqmmL 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 413872833765314369282118066308628991098658 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 22:58:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 22:58:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.aimatch.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21304421785625510960879238650883385894071056797029252406088016273288358663489528501614899289904141549860190316367881552156693758087832412618246631072977023180741574854964565667626811939784944145704590887838450577543999035015832648072290019971466760422098532034103058815382395629858084223683605970655893972569483412365206382708738890216736012419518950861329618576974609716396988298730110263592300660925723975181646818942938958690124701318062023885807791347395222237123681542619648518015552701146994677394163492423166366592804284903637084614874187301839272317411502279460616235457104263373383154438366785070896975023083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e297c0e9a0396a14869cdd27d1c4c52d78a43a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1629 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-content.360match.mktg.sas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicntn.produbanco.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm-drogeriemarkt.ro' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.rs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.dm.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mm.mojadm.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm-drogeriemarkt.bg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.dm.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.t.mm.mojadm.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicc1ust.cxtrvl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-360-cicolusp.cxtrvl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-at3.altibox.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360-nonprod.uscellular.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.altibox.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.clubpremier.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.coopforsikringer.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.csob.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.elanyo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.footbelsite-acc.rbfa.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.frankfurt-airport.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.generali.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.idaten.ne.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.infosquaregroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.kiwi.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.knvb.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.magazine.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.marketing.officedepot.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.meny.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.nature.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.paulfredrick.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.rbfa.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.stoloto.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.telia.ee' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.topdanmark.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.trumf.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.uscellular.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-ci360.worldwildlife.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientd-ci360.wafasalaf.ma' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-kclientp-ci360.wafasalaf.ma' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-test-ci360.nature.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.24.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aimatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.dna360.scholastic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mktg.sas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.odt.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mscontent.morningstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticcontent.mycwt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usincm-content.mktg.sas.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007c0d8b1a362267cee5323d7feac28b8478dca4fb1433e02f7325df684097bdc797fddb7efcccb399078f36b40656ce23d96991b487402fb2aa75f5578ac0284d739ac1acd900cb7481a5be9a61a01f71d02865bd645749ae39aca8e9d673eae2c4dc12c23121f5d081c472d7cdec9810fe01e202f8dcc3956856640242c46cdbd063e943539f508500cefa69a777669800cedf0d44f66ff902a2d145d5e82c4c676a54a89e36916bb9ae89e65ce0c8b4f2a72cc1f9f0248ae386938935b4d80a3bb9d55fca09df7e0f091d3b63e11a21f6053ff36b29c6d6202dd3e6edb2327cc1b1cee2cba5b8b3bfe4be2a7b7479a7448cdaa6079fa23a9d163d5b4cf3ce3e