san1969.cdntwrk.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:22:3d:39:b8:e9:80:72:56:ac:55:d2:24:cc:aa:47:f0 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san1969.cdntwrk.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:22:3d:39:b8:e9:80:72:56:ac:55:d2:24:cc:aa:47:f0
Serial Number (int): 328077713364497331143368944820384430704624
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:c2:82:20:c5:a2:af:dd:ed:31:cf:40:57:66:10:8b:97:9d:df:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:0d:bb:9f:f5:04:d4:b9:bf:99:2d:31:9a:d2:30:e8:db:56:2e:a5
Fingerprint (sha256): ba:21:12:89:f6:d8:20:18:f8:4f:f1:2d:bb:b1:c4:98:c5:70:2b:7f:68:18:3e:36:b6:33:37:8b:b1:3e:4a:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san1969.cdntwrk.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san1969.cdntwrk.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aetna.ufcontent.com
analog.mouser.com
appsflyer.ufcontent.com
avaloq.ufcontent.com
aws-startup.ufcontent.com
awshealthcare.ufcontent.com
awsmanufacturing.ufcontent.com
axon.ufcontent.com
blog.ingrammicro.ca
bouncexdemo.ufcontent.com
bwanner2.ufcontent.com
cellebrite.ufcontent.com
celtra.ufcontent.com
cf.ufcontent.com
cigna.ufcontent.com
clari.ufcontent.com
coalfire.ufcontent.com
converge.autodesk.co.jp
converge.autodesk.de
creditplus.ufcontent.com
crowdrifftv2.ufcontent.com
curriculumassociates.ufcontent.com
cyberarktv2testing.ufcontent.com
da.ufcontent.com
db.ufcontent.com
dylan.ufcontent.com
echo.ufcontent.com
ewilliams2.ufcontent.com
five9.ufcontent.com
forescoutes.ufcontent.com
freeman.ufcontent.com
galvanize.ufcontent.com
gotenna.ufcontent.com
h2-legacy.relevantize.com
hdms.ufcontent.com
healthgrades.ufcontent.com
hexagonevents.ufcontent.com
hub.acd-inc.com
hub.degreed.com
igarbouz2.ufcontent.com
insights-north-america.aon.ca
inspire.relationshipone.com
itential.ufcontent.com
jhoy.ufcontent.com
jlewis.ufcontent.com
jpiccolotto2.ufcontent.com
jpsingh.ufcontent.com
jrni.ufcontent.com
legalzoom.ufcontent.com
linewize.ufcontent.com
lrwonline.ufcontent.com
luminate-centrederessources.equifax.ca
luminate-resourcecentre.equifax.ca
m-files.ufcontent.com
may27thpostbetacreatecert.relevantize.com
may27thpostbetathree.relevantize.com
mbxsystems.ufcontent.com
menlosecurity.ufcontent.com
mmv.ufcontent.com
modmed.ufcontent.com
mpandya2.ufcontent.com
my.anritsuresources.com
npoch.ufcontent.com
ob-apps.ufcontent.com
ordr.ufcontent.com
othot.ufcontent.com
perspectives-amerique-du-nord.aon.ca
pravda.ufcontent.com
purefacts.ufcontent.com
r1a.ufcontent.com
regulatory-access.parexel.com
resources.brivo.com
resources.eisgroup.com
resources.system-analysis.cadence.com
revionics.ufcontent.com
san1969.cdntwrk.com
silversky-secondary.ufcontent.com
socialsolutions.ufcontent.com
stevenflipbookfirst.relevantize.com
subdirectoytest.relevantize.com
success.easyprojects.net
sureclinical.ufcontent.com
talemetry.ufcontent.com
teamsupport.ufcontent.com
thinkwhy.ufcontent.com
training.resources.awscloud.com
training.ufcontent.com
tv2-volaris.ufcontent.com
uchandna2.ufcontent.com
ufa-galaxytab.relevantize.com
ufa-ipad.relevantize.com
ufa-iphonex.relevantize.com
ufa-pixel.relevantize.com
ufusertest.pmsrvr.com
ufusertesting.pmsrvr.com
welcome.spearmarketing.com
wileysuccesshub-themesv2.ufcontent.com
yipitdata.ufcontent.com
zduf.ufcontent.com

Other certificates including the domain name cdntwrk.com

(limited to 100 certificates)
ssl3.cdntwrk.com
ssl3.cdntwrk.com
san1297.cdntwrk.com
ssl3.cdntwrk.com
san2742.cdntwrk.com
san3263.cdntwrk.com
ssl.cdntwrk.com
san2859.cdntwrk.com
san311.cdntwrk.com
san3223.cdntwrk.com
*.cdntwrk.com
san663.cdntwrk.com
ssl.cdntwrk.com
san2988.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
ssl3.cdntwrk.com
san2751.cdntwrk.com
content.cdntwrk.com
san1615.cdntwrk.com
ssl2.cdntwrk.com
san400.cdntwrk.com
san339.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san645.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san2074.cdntwrk.com
ssl3.cdntwrk.com
san3124.cdntwrk.com
ssl2.cdntwrk.com
ssl.cdntwrk.com
san2721.cdntwrk.com
ssl2.cdntwrk.com
san2441.cdntwrk.com
ssl3.cdntwrk.com
san3129.cdntwrk.com
san2781.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
san3249.cdntwrk.com
ssl.cdntwrk.com
ssl3.cdntwrk.com
san606.cdntwrk.com
san2970.cdntwrk.com
ssl2.cdntwrk.com
san3132.cdntwrk.com
ssl3.cdntwrk.com
san1010.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
ssl2.cdntwrk.com
ssl2.cdntwrk.com
api.cdntwrk.com
san2991.cdntwrk.com
san2074.cdntwrk.com
ssl.cdntwrk.com
san2459.cdntwrk.com
ssl5.cdntwrk.com
ssl3.cdntwrk.com
san275.cdntwrk.com
*.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
ssl5.cdntwrk.com
san753.cdntwrk.com
ssl3.cdntwrk.com
san470.cdntwrk.com
san3166.cdntwrk.com
ssl.cdntwrk.com
ssl.cdntwrk.com
ssl2.cdntwrk.com
s4.wpc.edgecastcdn.net
san3098.cdntwrk.com
san2537.cdntwrk.com
san732.cdntwrk.com
ssl2.cdntwrk.com
san2366.cdntwrk.com
san2468.cdntwrk.com
san398.cdntwrk.com
ssl2.cdntwrk.com
san3231.cdntwrk.com
content.cdntwrk.com
app.cdntwrk.com
san2937.cdntwrk.com
san464.cdntwrk.com
san2706.cdntwrk.com
ssl3.cdntwrk.com
ssl.cdntwrk.com
san2317.cdntwrk.com
san2234.cdntwrk.com
san3265.cdntwrk.com
ssl2.cdntwrk.com
ssl3.cdntwrk.com
san293.cdntwrk.com
san2504.cdntwrk.com

Certificate

The complete raw certificate details for san1969.cdntwrk.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhB+6fskvWX8/qt9v6Y4
foQIHOwg7WFFwsKdDcsZ4tOl4Yc6rTEFtUhNtI6za+aWxzJzE7RakLtRuZlSb8P4
hBhClef0/pkkfM4m+mJQe4Nw9Rbfl0EGaoCS2tdCkVUPTp39IJzQBgcKddL1SxkJ
zAIuhyudcsJOduSu1XeVgf8zjm/BjXfVItB8+zcZ5Li6/dDPBFiFZ+EN4EUb0ILe
hp0q+XLI5ziX6HtCNkvu2dc1ml2d4GQyrSWNkTvntmqSEm+VYUCrC90RujGdZfcQ
l68nEVyyg0bqy2IRadtQygPnG6NM1amgF0ftS4/bb5uLU/2/8kV5feGMO3ovhSyr
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328077713364497331143368944820384430704624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-27 18:27:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-26 18:27:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san1969.cdntwrk.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23488459085013694498861971407842511868406059735446587642429522606199439510722852758915214754225574470645590921065200057890790689241718506517291933194926776689419681933212070971038431745354126499322527106418176599979148181069050788267980039112246194583794646047571744599433834974097770744600724269765375879237542120817546160635533328556325295403006137973479869726453018851984691315071259231253602037224473956820556835033935866454624554504925643912555383592028476748109455720120341429593610030661584124326912553678688805526469207318326438933090022152943077896330307592471977662385743128003681809374952677841634704796511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bc28220c5a2afdded31cf405766108b979ddf8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2555 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aetna.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analog.mouser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsflyer.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avaloq.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-startup.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awshealthcare.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsmanufacturing.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axon.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.ingrammicro.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouncexdemo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwanner2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellebrite.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celtra.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigna.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clari.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coalfire.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'converge.autodesk.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'converge.autodesk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditplus.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crowdrifftv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curriculumassociates.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberarktv2testing.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'db.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dylan.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echo.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewilliams2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'five9.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forescoutes.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeman.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galvanize.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotenna.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2-legacy.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdms.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthgrades.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hexagonevents.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.acd-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.degreed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igarbouz2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights-north-america.aon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspire.relationshipone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itential.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhoy.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlewis.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpiccolotto2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpsingh.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrni.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalzoom.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linewize.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrwonline.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminate-centrederessources.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luminate-resourcecentre.equifax.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-files.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'may27thpostbetacreatecert.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'may27thpostbetathree.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbxsystems.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menlosecurity.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmv.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modmed.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpandya2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.anritsuresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npoch.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ob-apps.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordr.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'othot.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perspectives-amerique-du-nord.aon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pravda.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purefacts.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1a.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulatory-access.parexel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.brivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.eisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.system-analysis.cadence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revionics.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1969.cdntwrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silversky-secondary.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialsolutions.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevenflipbookfirst.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subdirectoytest.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success.easyprojects.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureclinical.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talemetry.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsupport.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkwhy.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.resources.awscloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv2-volaris.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uchandna2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-galaxytab.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-ipad.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-iphonex.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufa-pixel.relevantize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufusertest.pmsrvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufusertesting.pmsrvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.spearmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wileysuccesshub-themesv2.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yipitdata.ufcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zduf.ufcontent.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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