sansites3.jll.com

- Jones Lang LaSalle IP, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:a0:e5:36:40:00:26:74:d5:76:db:ae:91:fd:95:bd was issued on by DigiCert Inc.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Jones Lang LaSalle IP, Inc.

Organization: Jones Lang LaSalle IP, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:a0:e5:36:40:00:26:74:d5:76:db:ae:91:fd:95:bd
Serial Number (int): 3493872458862638402870276620516431293
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ce:96:89:6f:70:80:ca:cf:f8:a7:5a:44:eb:44:72:f7:b0:5b:11:41
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 14:d8:c9:ad:70:7b:5c:bf:1b:fd:6a:1a:61:b3:8e:fc:78:44:c5:b1
Fingerprint (sha256): c5:4b:d6:7f:4b:5c:2e:52:33:01:a1:79:5a:36:2c:16:b3:2c:85:11:28:cf:3e:83:94:3e:ad:30:f3:52:f6:09

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate sansites3.jll.com

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sansites3.jll.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sansites3.jll.com
adfs.integral.co.uk
arlington-dev.orchardworkspace.com
arlington.orchardworkspace.com
autodiscover.integral.co.uk
bascomadvisors.com
belux.ebrochure.jll.eu
cns.integral.co.uk
concept.integral.co.uk
conceptuat.integral.co.uk
consoleprd30.maintain.integral.co.uk
dev-arlington.orchardworkspace.com
dev-brooklyn.orchardworkspace.com
dev-seattle.orchardworkspace.com
dev-secaucus.orchardworkspace.com
dev.experiencecivis.com
dev.orchardworkspace.com
esb.maintain.integral.co.uk
esbprd20.maintain.integral.co.uk
esbprd30.maintain.integral.co.uk
esbprd40.maintain.integral.co.uk
eul.afpaces.com
ibcm.integral.co.uk
iceapi.maintain.integral.co.uk
intuitivepfi.integral.co.uk
loginprd30.maintain.integral.co.uk
lyncdiscover.integral.co.uk
maintain.integral.co.uk
maxicogprd20.maintain.integral.co.uk
maxmif.maintain.integral.co.uk
maxmifprd20.maintain.integral.co.uk
maxmifprd30.maintain.integral.co.uk
maxreportsprd30.maintain.integral.co.uk
maxuiprd30.maintain.integral.co.uk
maxuiprd40.maintain.integral.co.uk
origin-portal.integral.co.uk
pki.integral.co.uk
portal.afpaces.com
sandbox.subscribe.jll.com
secaucus.orchardworkspace.com
sip.integral.co.uk
stg-arlington.orchardworkspace.com
stg-brooklyn.orchardworkspace.com
stg-seattle.orchardworkspace.com
stg-secaucus.orchardworkspace.com
stg.experiencecivis.com
stg.orchardworkspace.com
support.integral.co.uk
vixtab.integral.co.uk
vpn.integral.co.uk
vpn01.integral.co.uk
www.bascomadvisors.com
www.experiencecivis.com
www.orchardworkspace.com
www.propiedades.jll.com
www.residential.jll.lu
zertovpn.integral.co.uk

Other certificates including the domain name jll.com

(limited to 100 certificates)
*.ap.jll.com
access.jll.com
www.jllproperty.com
compensationplanning.jll.com
ambitions.jll.com
sansites.jll.com
*.ap.jll.com
investor.jll.com
oneeightyst-dev.jll.com
Projectsapp.jll.com
bpm.jll.com
flexspace.jll.com
proposals.jll.com
immobilier.jll.fr
1441blake.proposals.jll.com
lyncweb-ext-01.am.jll.com
nxtinvest.eu.jll.com
perspectives.jll.com
lyncweb-ext-01.am.jll.com
www.joneslanglasalle.com
tourpointapp.jll.com
ontariosystems.proposals.jll.com
cds2.cvent.com
help.celerity-uk.com
inbom01tsbp002.ap.jll.com
cds2.cvent.com
hybridworks-qa.jll.com
www.joneslanglasalle.com
fr-nxt.eu.jll.com
capitalmarkets.jll.com
charlotteofficemove.resource.jll.com
dev-bpm.jll.com
*.jll.com
fsus-14.freshservice.com
THBKK02TSBP002.ap.jll.com
forum.jllcab.live.jll.com
capitalmarkets.jll.com
webmail.am.joneslanglasalle.com
ask.jll.com
propertytemplate.proposals.jll.com
MapIT.EU.JLL.COM
immobilier.jll.lu
cds2.cvent.com
jllapple.live.jll.com
www.arpm.conference.jll.com
lilexpc02.am.jll.com
*.ap.jll.com
fsus-14.freshservice.com
www.thefoundry.proposals.jll.com
globalsustainability.conference.jll.com
cds2.cvent.com
webmail.am.joneslanglasalle.com
hiddengem.conference.jll.com
rmr.proposals.jll.com
shelbournecleveland.proposals.jll.com
www.joneslanglasalle.com
red-preprod.jll.com
authn.jll.com
brandhub.jll.com
*.ap.jll.com
8995airportroad.resource.jll.com
jll-sbx-okta.jll.com
jvdriver.resource.jll.com
tours.prd.propertycapsule.com
clientview-dev.jll.com
my-world.eu.jll.com
www.openavm.com
oneeightyst-dev.jll.com
bpm.jll.com
extapps.jll.com
slotdemo.proposals.jll.com
ambitions.jll.com
hiddengem.conference.jll.com
fed.jll.com
dev-bpm.jll.com
azdeptestprod.jll.com
*.ap.jll.com
lyncpool01.am.jll.com
jll.com.sg
nxtretail.eu.jll.com
authn.jll.com
fsus-14.freshservice.com
red-preprod.jll.com
nxtretail.eu.jll.com
webmail.eu.joneslanglasalle.com
fed.jll.com
*.ap.jll.com
immobilier.jll.fr
vdcexpe01.am.jll.com
capitalmarket-dev.jll.com
www.jllproperty.com
owamail.am.jll.com
clientview-dev.jll.com
sansites5.jll.com
sts.am.jll.com
multifamilyeastcoast.conference.jll.com
www.openavm.com
fsus-14.freshservice.com
jll.com.sg
medline.proposals.jll.com

Certificate

The complete raw certificate details for sansites3.jll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBi4WtTQHhKBRdKfSTaB5Nkw0Yth/
LZ67O3pJWhNWv8/BFR305ubtFaE+W5FMmkobucSeWEVf5QMLl4yIDMkpVw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3493872458862638402870276620516431293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle IP, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sansites3.jll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004062e16b5340784a05174a7d24da079364c3462d87f2d9ebb3b7a495a1356bfcfc1151df4e6e6ed15a13e5b914c9a4a1bb9c49e58455fe5030b978c880cc92957
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce96896f7080cacff8a75a44eb4472f7b05b1141
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1639 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sansites3.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlington-dev.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlington.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bascomadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belux.ebrochure.jll.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cns.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concept.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conceptuat.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consoleprd30.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-arlington.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-brooklyn.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-seattle.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-secaucus.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.experiencecivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbprd20.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbprd30.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esbprd40.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eul.afpaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcm.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iceapi.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuitivepfi.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginprd30.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxicogprd20.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxmif.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxmifprd20.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxmifprd30.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxreportsprd30.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxuiprd30.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxuiprd40.maintain.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-portal.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pki.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.afpaces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.subscribe.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secaucus.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-arlington.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-brooklyn.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-seattle.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-secaucus.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.experiencecivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vixtab.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn01.integral.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bascomadvisors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencecivis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orchardworkspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propiedades.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residential.jll.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zertovpn.integral.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e3404c0800000040300473045022100913e48fef7f7f69c5d0989df886a1f5ad53443fd01a6f32a5f84abcadf73ed6c02204241deb999e74df9a589b4628f5dad122e3244ef6fb265f20a03be0f7f6224ec00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3404c03300000403004830460221008a784c2c57f3b797487405e4e77c73c7af752e0fe6c9cb35b506476a9db63a2a0221009bb9a62b5ad00ef49a21ccfed05b8e3896a86a41e9625705b1c3287990959262007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e3404c0300000040300483046022100edb7ba9b32dda77d098d31943f2f358167b9e4821dc92bd8c34ec9376d3c5270022100d1b8dcdf264e9aea66bb910eb7a81007976dd0ffd180645ef5cc79010b35f2c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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