san1927.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 03:73:1f:7d:92:f1:2c:e3:a2:11:a7:b7:d4:9f:67:79:c0:5f was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san1927.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:1f:7d:92:f1:2c:e3:a2:11:a7:b7:d4:9f:67:79:c0:5f
Serial Number (int): 300511188076504994314697191889392262299743
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:f2:bd:af:98:de:91:23:24:1b:61:32:bf:77:2f:83:79:af:ca:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:a1:93:c7:5e:52:cd:23:e3:1c:23:26:0b:f9:6f:2e:42:24:ce:a5
Fingerprint (sha256): 95:13:c8:9a:bd:23:25:57:36:3a:b7:63:8a:7a:e7:45:ae:2f:9f:62:f7:d5:2e:e8:a4:87:90:85:31:8e:7b:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san1927.cdntwrk.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1927.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3m-command.ufcontent.com
3m-commandfr.ufcontent.com
3m-dental.ufcontent.com
3m-dentalfr.ufcontent.com
3m-medical.ufcontent.com
3m-medicalfr.ufcontent.com
3m-safety.ufcontent.com
3m-safetyfr.ufcontent.com
3mfoodsafety.ufcontent.com
3mfrfoodsafety.ufcontent.com
acquia.ufcontent.com
adara.ufcontent.com
adviser.ufcontent.com
adzerk.ufcontent.com
allstate.ufcontent.com
alteryx.ufcontent.com
artec3d.ufcontent.com
associa.ufcontent.com
behavox.ufcontent.com
bitglass.ufcontent.com
blackboard.ufcontent.com
boldly.amc.ca
boldly.cma.ca
bouncex.ufcontent.com
bsci.ufcontent.com
centrify.ufcontent.com
cognex.ufcontent.com
creelighting.ufcontent.com
ctm.ufcontent.com
cultureampdemo.ufcontent.com
datakitchen.ufcontent.com
dialogue.ufcontent.com
dinersclub.ufcontent.com
experience.cision.com
f15.ufcontent.com
fatherhood.ufcontent.com
fe-themesv2.relevantize.com
fe.relevantize.com
freddiemac.ufcontent.com
gcloud.ufcontent.com
gs1mexico.ufcontent.com
guardicore.ufcontent.com
hanu.ufcontent.com
hibob.ufcontent.com
honeycombio.ufcontent.com
hracuity.ufcontent.com
ideesquicollent.ufcontent.com
info.piano.io
insights.levdigital.com
insights.turbonomic.com
inspirationthatsticks.ufcontent.com
intricatelydemo.ufcontent.com
inturn.ufcontent.com
iris.ufcontent.com
joule-tv2-en.ufcontent.com
joule-tv2-fr.ufcontent.com
k16solutions.ufcontent.com
kevandkattest.ufcontent.com
kkartak.ufcontent.com
kununu.ufcontent.com
mimecast.ufcontent.com
nordson.ufcontent.com
omnicell-domain-test.ufcontent.com
ptc.ufcontent.com
quorumcan.ufcontent.com
r1tv2.ufcontent.com
relationshipone.ufcontent.com
resources-au.rldatix.com
resources-uk.rldatix.com
resources.accurate.com
resources.armory.io
resources.boomtownroi.com
resources.chilipiper.com
resources.confirmit.com
resources.jax.org
resources.netscout.com
resources.ordr.net
resources.rambus.com
resources.triplelift.com
resources.whiteops.com
revenuewell.ufcontent.com
san1927.cdntwrk.com
sciencecenter3m-fr.ufcontent.com
scotchbrite-fr.ufcontent.com
scotchbrite.ufcontent.com
scottishpacific.ufcontent.com
ssettle.ufcontent.com
staging.intelligentdemand.com
sugarcrm.ufcontent.com
surescripts.ufcontent.com
tab.ufcontent.com
transmitsecurity.ufcontent.com
typhoon-hil.ufcontent.com
wiley-dei.ufcontent.com
worldline.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san1927.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyWPx9jiwjvkDwzBzT1H
0fOLnV3S6rts86dB6MWdoosDK+lofBPamcwpPP6WcXkczhaGc+jlH5gCQkjUxNfa
8KFwEqJp6dpu2KRywwcqaSHxu3sb5qrIrruFApc+Eog8sGWLTEiJ7FEpEhQacR9w
TpD823YNFbJc74Q9H89ITPAy9iUNX6k3WESxvUYPxK0DviUacN5sYiuFdulDvhFn
vZ4cAW6bzYja4/aakkcepZv2eoGkycD7Cqr7K4KPrHTvwkJeQ1ynIiZkJacAmRGo
JMuhRcpAL2w6qg2ByhYyDjxrmnvi0de7fb9zZmKy+6PBH6DmjO98xJSoVb2/g3Hk
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300511188076504994314697191889392262299743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-19 13:31:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-18 13:31:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1927.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23625085365240195070537303022278888279024650912596243875942825296924392908718034632472427376629399809081573384153902776149289369861063388633666581396185996839276980771301228564541981438420338548079093276021155867980344159289181615516862544281902097503003590243906419224923962486708909428898072415679117011096260599905248305912948645133798698004692088846446964151287062151115386871895627505641551677447760905624216178709023925303279652107916514099219225390281902912234638439899414549731140237743702263155412423752735291367024662922267132328011863752886296362083728521639276707814296174665975993488647532663913078449191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89f2bdaf98de9123241b6132bf772f8379afca57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-command.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-commandfr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-dental.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-dentalfr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-medical.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-medicalfr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-safety.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3m-safetyfr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3mfoodsafety.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3mfrfoodsafety.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adara.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviser.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adzerk.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allstate.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alteryx.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artec3d.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associa.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behavox.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitglass.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldly.amc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boldly.cma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouncex.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsci.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrify.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognex.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creelighting.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureampdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datakitchen.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogue.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinersclub.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.cision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f15.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherhood.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe-themesv2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fe.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freddiemac.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcloud.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs1mexico.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardicore.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanu.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibob.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeycombio.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hracuity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideesquicollent.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.piano.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.levdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.turbonomic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirationthatsticks.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intricatelydemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inturn.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iris.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joule-tv2-en.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joule-tv2-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k16solutions.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevandkattest.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkartak.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kununu.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimecast.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordson.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnicell-domain-test.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptc.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quorumcan.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1tv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relationshipone.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources-au.rldatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources-uk.rldatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.accurate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.armory.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.boomtownroi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.chilipiper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.confirmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.jax.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.netscout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.ordr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.rambus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.triplelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.whiteops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revenuewell.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1927.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencecenter3m-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotchbrite-fr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotchbrite.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottishpacific.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssettle.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.intelligentdemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarcrm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surescripts.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tab.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transmitsecurity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typhoon-hil.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiley-dei.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldline.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000178ea8b5be700000403004730450221009ac1b1c5a9d2f7bd41c0cca1567b61d4669f0305f56309fd744cc7480be354a0022058bd6810f1f1fdf8a196f9e325210ffa5a59bf521c846add0138b70e53d9f2cd0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178ea8b5c02000004030046304402206b1bbc08a2b2841080f90fb9e32f32887ac88821a27b161eae914a78ac4a09a402203fd0284a94cab3596efa6753635317b28ddef81bd181681f24826d9d9ce49abb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad6560727963c82929db800fa7eeee9f0be04f58e179255e63c0340f440a37f2b09883189a79ae301bedbad9a8be46536764b499be375da4f1b586db8c56eba72d36181ae910a78531480483fbba0e2a0c8b90e4dfb2f6821a1957bab3eddf839b1ceeca5254acf6514c5ab2435b06ffbb97c0ae8ee6a5c54f467cfbb501b8a3092a547f3dc7ae18a6f27be98a0f4e9d15bf657d80cd1884634c281254c802b619f2d4b8769b704f5e7aee6be11b38eb2603e2e9cd43ba0dc6c33664ced9528933e1e5fb118cf648eca5a347e053b2804eebf3801b1ab91b8c81e978487f9321a840e589e1018bf191009e6ff0ead955fcfcac3cfae95f80075820ef7a2711ac