www.joneslanglasalle.com

- Jones Lang LaSalle Incorporated -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:46:04:f0:b1:9c:0f:56:0a:40:22:5a:3f:27:02:3b was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jones Lang LaSalle Incorporated

Organization: Jones Lang LaSalle Incorporated
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:46:04:f0:b1:9c:0f:56:0a:40:22:5a:3f:27:02:3b
Serial Number (int): 17643524924666273900763165575373849147
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d4:8f:04:3c:16:4d:f1:8d:30:99:eb:98:39:15:af:5c:00:00:7f:89
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 7a:04:0b:71:8a:66:6d:89:5e:dc:5c:3a:e7:68:8e:4c:f4:6c:cb:07
Fingerprint (sha256): c0:92:b9:4f:de:37:4f:ad:00:4f:c6:9e:c8:aa:42:a4:16:78:a1:cf:4c:cb:51:6c:69:f0:06:78:9f:47:e4:60

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.joneslanglasalle.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.joneslanglasalle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.joneslanglasalle.com
www.us.jll.com
www.property.jll.co.uk
www.latinamerica.jll.com
www.joneslanglasalle.com.vn
www.joneslanglasalle.com.tw
www.joneslanglasalle.com.hk
www.joneslanglasalle.com.cn
www.joneslanglasalle.co.jp
www.jllsweden.se
www.jllproperty.com
www.jlldevelopernetwork.com
www.jll.ua
www.jll.sk
www.jll.ro
www.jll.pt
www.jll.pl
www.jll.pe
www.jll.nz
www.jll.nl
www.jll.lu
www.jll.it
www.jll.ie
www.jll.hu
www.jll.fr
www.jll.fi
www.jll.es
www.jll.de
www.jll.cz
www.jll.com.tw
www.jll.com.tr
www.jll.com.sg
www.jll.com.ph
www.jll.com.my
www.jll.com.mx
www.jll.com.mo
www.jll.com.lk
www.jll.com.hk
www.jll.com.co
www.jll.com.br
www.jll.com.au
www.jll.com.ar
www.jll.com
www.jll.co.za
www.jll.co.uk
www.jll.co.th
www.jll.co.kr
www.jll.co.in
www.jll.co.il
www.jll.co.id
www.jll.cl
www.jll.ch
www.jll.ca
www.jll.be
www.jll-mena.com
www.brg.com
www.africa.jll.com
www.aanbod.jll.nl
py.oneviewfinancials.joneslanglasalle.com
property.jll.ie
property.jll.co.uk
portal.jll.com.br
phonesettings.am.jll.com
mriinprd.ap.joneslanglasalle.com
mriindev.ap.joneslanglasalle.com
main.mso.jll-playground.tasmas-sandbox.jll.com
main.mso.jll-demo.tasmas-sandbox.jll.com
main.manage.jll-playground.tasmas-sandbox.jll.com
main.manage.jll-demo.tasmas-sandbox.jll.com
joneslanglasalle.com
jllproperty.pt
jllproperty.it
jll-playground.tasmas-sandbox.jll.com
jll-nemovitosti.cz
jll-demo.tasmas-sandbox.jll.com
inmuebles.jll.es
immobilier.jll.fr
home.jll-playground.tasmas-sandbox.jll.com
home.jll-demo.tasmas-sandbox.jll.com
gis.am.jll.com
gewerbeimmobilien.jll.de
gerenciamento.jll.com.br
front.olm3.eu.jll.com
esp.ap.joneslanglasalle.com
dv.oneviewfinancials.joneslanglasalle.com
delphilil.am.joneslanglasalle.com
delphihr.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
console-production-01.jll-labs.com
clienthub.eu.joneslanglasalle.com
aanbod.jll.nl

Other certificates including the domain name joneslanglasalle.com

(limited to 100 certificates)
www.jllproperty.com
www.jllproperty.com
webdesk.ap.joneslanglasalle.com
*.am.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
oneview.apps.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
immobilier.jll.fr
*.joneslanglasalle.com
www.joneslanglasalle.com
*.joneslanglasalle.com
www.asiapacific.joneslanglasalle.com
*.am.joneslanglasalle.com
www.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
TIME.EU.JONESLANGLASALLE.COM
USLILVMARCAPP1.delphiprd.am.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
webmail.am.joneslanglasalle.com
delphihr.joneslanglasalle.com
*.oneviewfinancials.joneslanglasalle.com
webmail.am.joneslanglasalle.com
*.ap.joneslanglasalle.com
www.joneslanglasalle.com
delphifin.joneslanglasalle.com
authn.jll.com
delphihr.am.joneslanglasalle.com
www.jllproperty.com
www.jllproperty.com
imse1.am.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
sap.ap.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
authn.jll.com
webmail.eu.joneslanglasalle.com
oneviewfinancials.joneslanglasalle.com
jll4.cflisle.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
immobilier.jll.fr
*.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
delphifin.joneslanglasalle.com
kcspermit.am.joneslanglasalle.com
www.jllproperty.com
www.jllproperty.com
*.joneslanglasalle.com
*.am.joneslanglasalle.com
*.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
crm.joneslanglasalle.com
www.joneslanglasalle.com
www.joneslanglasalle.com
dirvdisite.am.joneslanglasalle.com
USVDCVMGLIWEBT2.delphiprd.am.joneslanglasalle.com
owamail.am.jll.com
webmail365.am.jll.com
www.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
www.joneslanglasalle.com
webim.am.joneslanglasalle.com
owamail.am.jll.com
owamail.am.jll.com
owamail.am.jll.com
psfindev.am.joneslanglasalle.com
www.jllproperty.com
delphifin.am.joneslanglasalle.com
*.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
www.cmx.joneslanglasalle.com
webaccess.joneslanglasalle.com
webdesk.ap.joneslanglasalle.com
*.eu.joneslanglasalle.com
uslilvmumaxwb1.delphiprd.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
www.joneslanglasalle.com
webmail.am.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
pg.rs.am.joneslanglasalle.com
ipmpwt.joneslanglasalle.com
vdi.am.joneslanglasalle.com
www.pg.rs.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphifin.joneslanglasalle.com
*.am.joneslanglasalle.com
immobilier.jll.fr
owamail.am.jll.com
teams.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
webaccess.joneslanglasalle.com
crashplan.joneslanglasalle.com
clientfin.am.joneslanglasalle.com
ldapvip.delphiprd.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
www.jllproperty.com
pg.rs.am.joneslanglasalle.com

Certificate

The complete raw certificate details for www.joneslanglasalle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMuOMsOPNMZAgEucYaLf
QvnLwDaVOe/wrbvQZiG6ri3l/WdcXh1FV6zOBBvoz8J8zbdFwVHtRYZ764HmArfR
xP8GfsFozQVoX5YspCXk3JuOnggbe3+3MZScX4hiWnwJjASfwcyqC7lv6fzMbQ76
NEnV2zcBH86ueR8608ae+OCF2KoCeva7xJxgwgHtkBFfI5tQ6wzJGIusRAFgbwDZ
FjsL9kXSyIvUeuGMBKvwRXq+eKOn+2+zpAU02eLaopbIVLLqUI2HtVtlpAxtbnK9
Fp3KmYG4e0mTBe7GFlI4gxuRi3pK9RqOseIXCFw/sirgFYq8V+5wGQAgapXhLVev
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17643524924666273900763165575373849147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.joneslanglasalle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22318318613485474431444596215482731754144567903753262729447395782794201656921799965437923481577588903714130367665452936806058930307200027764910211860810383243654909155768505354940938012892171921473475439354942213693896969606008681635465895982878375043208314106058370337408563338850493560750010242010724723638139594980582430165180283049373171472216527475855729577354939393843015662731879636278983422803399830751382953821433757324946129552088442586446485066286874511141113135336399594736500374191938931556973161566837877230549568899261330978238363113127993142947016595021278020239819332844239688540399746520074310627243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d48f043c164df18d3099eb983915af5c00007f89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latinamerica.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllsweden.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlldevelopernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll-mena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aanbod.jll.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'py.oneviewfinancials.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.jll.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonesettings.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinprd.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriindev.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.mso.jll-playground.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.mso.jll-demo.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.manage.jll-playground.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.manage.jll-demo.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllproperty.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll-playground.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll-nemovitosti.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll-demo.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmuebles.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.jll-playground.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.jll-demo.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewerbeimmobilien.jll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerenciamento.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front.olm3.eu.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esp.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv.oneviewfinancials.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphilil.am.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphihr.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphihr.am.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphifin.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphifin.am.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console-production-01.jll-labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clienthub.eu.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aanbod.jll.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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