san2153.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ca:07:b6:8d:ae:ca:5c:9a:05:62:3d:a5:d3:17:e5:5b:2b was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san2153.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ca:07:b6:8d:ae:ca:5c:9a:05:62:3d:a5:d3:17:e5:5b:2b
Serial Number (int): 417196434312737386268706579757516529687339
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 54:d5:8f:67:cf:71:fc:56:1a:ee:87:57:84:1f:2f:23:85:4c:45:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:ab:0d:68:c8:51:11:d8:84:04:16:2e:ab:ef:e1:b0:90:ac:d7:ba
Fingerprint (sha256): 9a:75:bf:1a:f5:fd:ee:9f:c3:23:43:35:cf:4f:85:52:cd:82:a4:75:31:81:c7:62:86:85:c6:f9:8d:ab:9d:01

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san2153.cdntwrk.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2153.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abaco.ufcontent.com
academytesting.ufcontent.com
alphasense.ufcontent.com
andriykoval.ufcontent.com
aragonresearch.ufcontent.com
associahub.ufcontent.com
autocadresources.autodesk.co.jp
autodesk.ufcontent.com
awslifesciences.ufcontent.com
b2lead.ufcontent.com
beamery.ufcontent.com
blueyonder.ufcontent.com
brandeddemo.ufcontent.com
brazil-resources.awscloud.com
brightpattern.ufcontent.com
cisioncanadademo.ufcontent.com
claras.ufcontent.com
clarus.ufcontent.com
clearwaveinc.ufcontent.com
constructible.ufcontent.com
controls-group.ufcontent.com
copado.ufcontent.com
cpryztocki.ufcontent.com
credly.ufcontent.com
datavail.ufcontent.com
discover.hms.com
fisglobal.ufcontent.com
flywire.ufcontent.com
forum.comcastbusiness.com
french.ufcontent.com
geosystems.ufcontent.com
globalexpansion.ufcontent.com
henry.ufcontent.com
hmsstaging.ufcontent.com
honeycomb.ufcontent.com
hubs-language-links4.relevantize.com
ibm.ufcontent.com
industry-insights.appfolio.com
info.seic.com
infoblox.ufcontent.com
jan18th.relevantize.com
jan18thtest2.relevantize.com
jp-tv1.ufcontent.com
lakecm.ufcontent.com
launchdarkly.ufcontent.com
leadiq.ufcontent.com
learn.enrollment.org
lucidpress.ufcontent.com
lyniate.ufcontent.com
macstadium.ufcontent.com
matillion.ufcontent.com
mentoringminds.ufcontent.com
mouser3.ufcontent.com
newsela.ufcontent.com
observe.ufcontent.com
oneaffiniti.ufcontent.com
onsolve.ufcontent.com
panoramaed.ufcontent.com
partner-resources.awscloud.com
pestroutes.ufcontent.com
picagroup.ufcontent.com
pmgdemo.ufcontent.com
pod.ufcontent.com
pointclickcare.ufcontent.com
quorum.ufcontent.com
resources.bettercloud.com
resources.cotiviti.com
resources.goanritsu.com
resources.intoo.com
resources.rldatix.com
resources.smartlinx.com
resourcetesting.ufcontent.com
revenueanalytics.ufcontent.com
ricoh.ufcontent.com
san2153.cdntwrk.com
shiftcrm.ufcontent.com
sincrodigital.ufcontent.com
sitecore.ufcontent.com
solutions-driven.ufcontent.com
sp.ufcontent.com
spiceworks.ufcontent.com
springbuk.ufcontent.com
spryker.ufcontent.com
stagingarcticwolf.ufcontent.com
startup-library.awscloud.com
stjoseph.ufcontent.com
telushealth.ufcontent.com
toplastics.ufcontent.com
trimbletransportation.ufcontent.com
trust.onelogin.com
uf-marketplace-admin-tv2.relevantize.com
vistaequity.ufcontent.com
wednesdaycovidtestcase11two.relevantize.com
wednesdaycovidtestcase14three.relevantize.com
wednesdaycovidtestcase7two.relevantize.com
wistia.ufcontent.com
www.reallygoodcontentexperiences.com
xref.ufcontent.com
zix.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san2153.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2JASRAOj1BdZeODJIiG
j+L2P+Ev9JhQFx4re8Fd3xvrXZABsYAEHbeiomLCCCK6Ook+67JXa6gjvzi/iIWZ
R7xmYaj1Shbhb7NVpbZoC0t2gftd733fDAWkdCEs37H8oYE18lEo8hxnN+J+4FFc
NnK10ndPc08na+wqxbvgXoV0vFrIaVFqTFCLVDa0bNDCNm8KNdWpS/zuLZ8aPwPT
+714QnKeV4asYoJ6MDkPYscqS1UtQ/mCYOt0WwztbOvlH7hO0obV9noUSO96w9um
n5ks7FSNh75fqMKpGyxtXQLN+TEtsDk/1mGGxT4167tUYkSbZPDJmE2uo+oZ2VwL
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417196434312737386268706579757516529687339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-17 18:10:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 18:10:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san2153.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25674825338576779735964669169827274492223684815161574476409415873738848141105360730890769139549707484847888966448816564004142489496807467317655702109992921236859060622293633185959881796200330008706058100126122518109657634003974068474150565990048846486436512311542363470133268039344561469809869271876250541252118661640689102287284525181911828772690137320793106589097612819673403985933942848469409626278151154226239355764324973250857904499678184020150016788828666399200826162115935572082811743561386805678701461419871638511918308733360746467618785567267677007287757887813537047278022123993806446819822503525361278258111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54d58f67cf71fc561aee8757841f2f23854c458a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abaco.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academytesting.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphasense.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andriykoval.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aragonresearch.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associahub.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocadresources.autodesk.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodesk.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awslifesciences.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2lead.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beamery.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueyonder.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandeddemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightpattern.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisioncanadademo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claras.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarus.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearwaveinc.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructible.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controls-group.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copado.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpryztocki.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credly.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datavail.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.hms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisglobal.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flywire.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.comcastbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geosystems.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalexpansion.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henry.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmsstaging.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeycomb.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubs-language-links4.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry-insights.appfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.seic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoblox.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan18th.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jan18thtest2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp-tv1.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakecm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'launchdarkly.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadiq.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.enrollment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucidpress.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyniate.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macstadium.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matillion.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentoringminds.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mouser3.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsela.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observe.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneaffiniti.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsolve.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panoramaed.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pestroutes.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picagroup.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmgdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointclickcare.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quorum.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.bettercloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.cotiviti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.goanritsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.intoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.rldatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.smartlinx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcetesting.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revenueanalytics.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricoh.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2153.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiftcrm.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sincrodigital.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitecore.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions-driven.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiceworks.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springbuk.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spryker.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingarcticwolf.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startup-library.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoseph.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telushealth.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toplastics.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimbletransportation.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.onelogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uf-marketplace-admin-tv2.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaequity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wednesdaycovidtestcase11two.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wednesdaycovidtestcase14three.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wednesdaycovidtestcase7two.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wistia.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reallygoodcontentexperiences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xref.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zix.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a1b61cad6000004030048304602210097ba39dce5a39eb7c30680982ee5aee6ab07c6bb5651a85c265e34fd16f1ddfa022100c5ce926581fa0d528fe26e31cdecf3344b51f6841ba381d2cc7b00c776f968350076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017a1b61cc3a0000040300473045022100824aa121d8a0cdfcc84e6b10bd8e3d9757fd68ee9440d4c956e850732315690702200bf24840c47003f384f45e8cbb415c999016f4e4a129b9728cbc09f69e835898
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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