www.joneslanglasalle.com

- Jones Lang LaSalle Incorporated -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:a7:f5:64:eb:1d:e8:76:a3:9b:65:6d:18:97:f5:1b was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jones Lang LaSalle Incorporated

Organization: Jones Lang LaSalle Incorporated
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:f5:64:eb:1d:e8:76:a3:9b:65:6d:18:97:f5:1b
Serial Number (int): 4859774748664343852677510319398450459
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 92:40:4f:4d:80:fc:a7:70:3a:ae:c0:06:8d:a7:8d:b7:f7:2e:9e:c1
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 09:78:b0:96:82:7b:bf:33:89:43:0b:f6:9a:6d:49:0c:f3:f1:2a:db
Fingerprint (sha256): c0:ba:84:78:aa:de:9f:dd:bc:de:d6:2b:24:f1:a7:3b:81:7c:a6:35:ad:34:03:5b:22:e4:3f:c6:b4:c0:72:2c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.joneslanglasalle.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.joneslanglasalle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.joneslanglasalle.com
30aniversario.jll.es
aanbod.jll.nl
admin.jll04.tasmas-sandbox.jll.com
api.jll04.tasmas-sandbox.jll.com
auth.jll04.tasmas-sandbox.jll.com
clienthub.eu.joneslanglasalle.com
console-production-01.jll-labs.com
delphilil.am.joneslanglasalle.com
esp.ap.joneslanglasalle.com
gerenciamento.jll.com.br
gewerbeimmobilien.jll.de
gis.am.jll.com
grand-paris.jll.fr
home.jll04.tasmas-sandbox.jll.com
immobilier.jll.be
immobilier.jll.fr
inmuebles.jll.es
jll-nemovitosti.cz
jllcampaigns.com
jllproperty.it
jllproperty.pt
joneslanglasalle.co.jp
joneslanglasalle.com
main-all.manage.jll04.tasmas-sandbox.jll.com
main.home.jll04.tasmas-sandbox.jll.com
main.manage.jll04.tasmas-sandbox.jll.com
markets360.es
maxinst.manage.jll04.tasmas-sandbox.jll.com
mriindev.ap.joneslanglasalle.com
mriinprd.ap.joneslanglasalle.com
phonesettings.am.jll.com
portal.jll.com.br
property.jll.co.uk
property.jll.ie
py.oneviewfinancials.joneslanglasalle.com
realestate.jll.be
vastgoed.jll.be
www.africa.jll.com
www.grand-paris.jll.fr
www.jll-mena.com
www.jll.be
www.jll.ca
www.jll.ch
www.jll.cl
www.jll.co.id
www.jll.co.il
www.jll.co.in
www.jll.co.kr
www.jll.co.th
www.jll.co.uk
www.jll.co.za
www.jll.com
www.jll.com.ar
www.jll.com.au
www.jll.com.br
www.jll.com.co
www.jll.com.hk
www.jll.com.lk
www.jll.com.mo
www.jll.com.mx
www.jll.com.my
www.jll.com.ph
www.jll.com.sg
www.jll.com.tr
www.jll.com.tw
www.jll.cz
www.jll.de
www.jll.es
www.jll.fi
www.jll.fr
www.jll.hu
www.jll.ie
www.jll.it
www.jll.lu
www.jll.nl
www.jll.nz
www.jll.pe
www.jll.pl
www.jll.pt
www.jll.ro
www.jll.sk
www.jllcampaigns.com
www.jllproperty.com
www.jllsweden.se
www.jllvaloraciones.es
www.joneslanglasalle.co.jp
www.joneslanglasalle.com.cn
www.joneslanglasalle.com.hk
www.joneslanglasalle.com.tw
www.joneslanglasalle.com.vn
www.latinamerica.jll.com
www.markets360.es
www.mdlp81.com
www.merrittandharris.com
www.property.jll.co.uk
www.us.jll.com

Other certificates including the domain name joneslanglasalle.com

(limited to 100 certificates)
www.jllproperty.com
www.jllproperty.com
webdesk.ap.joneslanglasalle.com
*.am.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
oneview.apps.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
immobilier.jll.fr
*.joneslanglasalle.com
www.joneslanglasalle.com
*.joneslanglasalle.com
www.asiapacific.joneslanglasalle.com
*.am.joneslanglasalle.com
www.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
TIME.EU.JONESLANGLASALLE.COM
USLILVMARCAPP1.delphiprd.am.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
webmail.am.joneslanglasalle.com
delphihr.joneslanglasalle.com
*.oneviewfinancials.joneslanglasalle.com
webmail.am.joneslanglasalle.com
*.ap.joneslanglasalle.com
www.joneslanglasalle.com
delphifin.joneslanglasalle.com
authn.jll.com
delphihr.am.joneslanglasalle.com
www.jllproperty.com
www.jllproperty.com
imse1.am.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
sap.ap.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
authn.jll.com
webmail.eu.joneslanglasalle.com
oneviewfinancials.joneslanglasalle.com
jll4.cflisle.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
immobilier.jll.fr
*.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
delphifin.joneslanglasalle.com
kcspermit.am.joneslanglasalle.com
www.jllproperty.com
www.jllproperty.com
*.joneslanglasalle.com
*.am.joneslanglasalle.com
*.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
crm.joneslanglasalle.com
www.joneslanglasalle.com
www.joneslanglasalle.com
dirvdisite.am.joneslanglasalle.com
USVDCVMGLIWEBT2.delphiprd.am.joneslanglasalle.com
owamail.am.jll.com
webmail365.am.jll.com
www.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
www.joneslanglasalle.com
webim.am.joneslanglasalle.com
owamail.am.jll.com
owamail.am.jll.com
owamail.am.jll.com
psfindev.am.joneslanglasalle.com
www.jllproperty.com
delphifin.am.joneslanglasalle.com
*.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
www.cmx.joneslanglasalle.com
webaccess.joneslanglasalle.com
webdesk.ap.joneslanglasalle.com
*.eu.joneslanglasalle.com
uslilvmumaxwb1.delphiprd.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
www.joneslanglasalle.com
webmail.am.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
pg.rs.am.joneslanglasalle.com
ipmpwt.joneslanglasalle.com
vdi.am.joneslanglasalle.com
www.pg.rs.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphifin.joneslanglasalle.com
*.am.joneslanglasalle.com
immobilier.jll.fr
owamail.am.jll.com
teams.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
webaccess.joneslanglasalle.com
crashplan.joneslanglasalle.com
clientfin.am.joneslanglasalle.com
ldapvip.delphiprd.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
www.jllproperty.com
pg.rs.am.joneslanglasalle.com

Certificate

The complete raw certificate details for www.joneslanglasalle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uJmqcXwackgoB//hbXd
YI/r+ygEyle62NcuBGOzVoHDFh2h28wuikxybvQB4L3nnNbYyc9oQP4fvuN2JSzn
O1BDvg92Om44qnzvD1S0Ro1QZoAGrTbCzgeooQZr6uYgGmvZPxRdWnghgvqkrtgW
NEsTTI8jMf4KlDNpVyQmdXoSfRvkyk3CsO2nAOYrJgWgnzlD4goh2zfyt7eGPltg
wQJ436+rUGVn+BJbXXE9kPaXkn27AzGZFbGG26RQ8gObzdqYnA+4z7NbwZ9NfvDn
NtCpgncRQTs82N/7gawDXHsaNY2gw6ySdCCHL4DpYW+H1P63bElUUdbi4MdQho53
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4859774748664343852677510319398450459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.joneslanglasalle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27126639770633087577245590530766786522696254347080194158376652092530118687811401679070402386815888791888000439753577502504167542954990932693632861584390173164357183149211210226570186711402069653990411897023712744180511625125336491798927335875173059671344750763197012068932387259209155334897174825162341923788255974959970675529010083727364418482438108313978873605739311614213558038531779640817774195854761174709103388338389567604280076260824402115024518518140868325731884369643602344855430234608809583343256406153183854922188922348401520688069211751565967286678809891078795908736821278123944416888954871651039758415639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92404f4d80fca7703aaec0068da78db7f72e9ec1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2003 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30aniversario.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aanbod.jll.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clienthub.eu.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console-production-01.jll-labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphilil.am.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esp.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerenciamento.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewerbeimmobilien.jll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-paris.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmuebles.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll-nemovitosti.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllproperty.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joneslanglasalle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-all.manage.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.home.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.manage.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets360.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxinst.manage.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriindev.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinprd.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonesettings.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.jll.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'py.oneviewfinancials.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastgoed.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grand-paris.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll-mena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllsweden.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllvaloraciones.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latinamerica.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markets360.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdlp81.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merrittandharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.jll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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