www.joneslanglasalle.com

- Jones Lang LaSalle Incorporated -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:d5:7f:d0:25:94:40:ab:0a:db:a4:00:c9:73:f1:2a was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jones Lang LaSalle Incorporated

Organization: Jones Lang LaSalle Incorporated
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d5:7f:d0:25:94:40:ab:0a:db:a4:00:c9:73:f1:2a
Serial Number (int): 3767007579545388531133942802605666602
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4a:da:bc:a9:cf:bd:8a:86:59:78:ae:8e:38:4b:f7:bc:73:3d:51:57
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c6:f6:78:49:01:a2:1e:fb:82:c4:e7:ec:84:f7:7c:1b:bd:55:9c:7c
Fingerprint (sha256): ee:37:5a:8b:e2:90:f6:75:3c:03:f1:46:80:cb:14:a6:47:b4:02:71:66:9b:02:b8:17:37:fd:1c:29:5c:c7:f0

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.joneslanglasalle.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.joneslanglasalle.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.joneslanglasalle.com
30aniversario.jll.es
aanbod.jll.nl
admin.jll04.tasmas-sandbox.jll.com
api.jll04.tasmas-sandbox.jll.com
auth.jll04.tasmas-sandbox.jll.com
clienthub.eu.joneslanglasalle.com
console-production-01.jll-labs.com
delphilil.am.joneslanglasalle.com
esp.ap.joneslanglasalle.com
gerenciamento.jll.com.br
gewerbeimmobilien.jll.de
gis.am.jll.com
grand-paris.jll.fr
home.jll04.tasmas-sandbox.jll.com
immobilier.jll.fr
inmuebles.jll.es
jll-nemovitosti.cz
jllcampaigns.com
jllproperty.it
jllproperty.pt
joneslanglasalle.co.jp
joneslanglasalle.com
main-all.manage.jll04.tasmas-sandbox.jll.com
main.home.jll04.tasmas-sandbox.jll.com
main.manage.jll04.tasmas-sandbox.jll.com
markets360.es
maxinst.manage.jll04.tasmas-sandbox.jll.com
mriindev.ap.joneslanglasalle.com
mriinprd.ap.joneslanglasalle.com
phonesettings.am.jll.com
portal.jll.com.br
property.jll.co.uk
property.jll.ie
py.oneviewfinancials.joneslanglasalle.com
www.africa.jll.com
www.grand-paris.jll.fr
www.jll-mena.com
www.jll.be
www.jll.ca
www.jll.ch
www.jll.cl
www.jll.co.id
www.jll.co.il
www.jll.co.in
www.jll.co.kr
www.jll.co.th
www.jll.co.uk
www.jll.co.za
www.jll.com
www.jll.com.ar
www.jll.com.au
www.jll.com.br
www.jll.com.co
www.jll.com.hk
www.jll.com.lk
www.jll.com.mo
www.jll.com.mx
www.jll.com.my
www.jll.com.ph
www.jll.com.sg
www.jll.com.tr
www.jll.com.tw
www.jll.cz
www.jll.de
www.jll.es
www.jll.fi
www.jll.fr
www.jll.hu
www.jll.ie
www.jll.it
www.jll.lu
www.jll.nl
www.jll.nz
www.jll.pe
www.jll.pl
www.jll.pt
www.jll.ro
www.jll.sk
www.jllcampaigns.com
www.jllproperty.com
www.jllsweden.se
www.jllvaloraciones.es
www.joneslanglasalle.co.jp
www.joneslanglasalle.com.cn
www.joneslanglasalle.com.hk
www.joneslanglasalle.com.tw
www.joneslanglasalle.com.vn
www.latinamerica.jll.com
www.markets360.es
www.mdlp81.com
www.merrittandharris.com
www.property.jll.co.uk
www.us.jll.com

Other certificates including the domain name joneslanglasalle.com

(limited to 100 certificates)
www.jllproperty.com
www.jllproperty.com
webdesk.ap.joneslanglasalle.com
*.am.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
oneview.apps.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
immobilier.jll.fr
*.joneslanglasalle.com
www.joneslanglasalle.com
*.joneslanglasalle.com
www.asiapacific.joneslanglasalle.com
*.am.joneslanglasalle.com
www.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
TIME.EU.JONESLANGLASALLE.COM
USLILVMARCAPP1.delphiprd.am.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
webmail.am.joneslanglasalle.com
delphihr.joneslanglasalle.com
*.oneviewfinancials.joneslanglasalle.com
webmail.am.joneslanglasalle.com
*.ap.joneslanglasalle.com
www.joneslanglasalle.com
delphifin.joneslanglasalle.com
authn.jll.com
delphihr.am.joneslanglasalle.com
www.jllproperty.com
www.jllproperty.com
imse1.am.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
sap.ap.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
authn.jll.com
webmail.eu.joneslanglasalle.com
oneviewfinancials.joneslanglasalle.com
jll4.cflisle.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
immobilier.jll.fr
*.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
delphifin.joneslanglasalle.com
kcspermit.am.joneslanglasalle.com
www.jllproperty.com
www.jllproperty.com
*.joneslanglasalle.com
*.am.joneslanglasalle.com
*.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
crm.joneslanglasalle.com
www.joneslanglasalle.com
www.joneslanglasalle.com
dirvdisite.am.joneslanglasalle.com
USVDCVMGLIWEBT2.delphiprd.am.joneslanglasalle.com
owamail.am.jll.com
webmail365.am.jll.com
www.joneslanglasalle.com
delphifin.am.joneslanglasalle.com
www.joneslanglasalle.com
webim.am.joneslanglasalle.com
owamail.am.jll.com
owamail.am.jll.com
owamail.am.jll.com
psfindev.am.joneslanglasalle.com
www.jllproperty.com
delphifin.am.joneslanglasalle.com
*.joneslanglasalle.com
pshrdev.am.joneslanglasalle.com
www.cmx.joneslanglasalle.com
webaccess.joneslanglasalle.com
webdesk.ap.joneslanglasalle.com
*.eu.joneslanglasalle.com
uslilvmumaxwb1.delphiprd.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
www.joneslanglasalle.com
webmail.am.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
pg.rs.am.joneslanglasalle.com
ipmpwt.joneslanglasalle.com
vdi.am.joneslanglasalle.com
www.pg.rs.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphifin.joneslanglasalle.com
*.am.joneslanglasalle.com
immobilier.jll.fr
owamail.am.jll.com
teams.joneslanglasalle.com
delphihr.joneslanglasalle.com
www.jllproperty.com
webaccess.joneslanglasalle.com
crashplan.joneslanglasalle.com
clientfin.am.joneslanglasalle.com
ldapvip.delphiprd.am.joneslanglasalle.com
delphifin.joneslanglasalle.com
delphihr.am.joneslanglasalle.com
www.jllproperty.com
pg.rs.am.joneslanglasalle.com

Certificate

The complete raw certificate details for www.joneslanglasalle.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2uVSMQjn2s2ZsSuwdrA
q220ilIDNdQkcXSUADq525c/Q5ibR0URy94CRfaD5DW2hJApWa7F+WEEyjsVvsy3
SXtoaLSiQEGZYiHs4K+mmZg2YOCEr0zSOutmMEl4kTkN42QqZhbEqV8o0QW1H5mo
6vaI3BjwcG37KQYtiOtqEDZrNOSroNqZPvukXOQqLruJn3wkqbDKiApgNiXXV07U
3Lp4zJ+YHrkKd2xcsimA8dKjwAQ2jUMgHiKgqMTIvO/NPdO62OOa7CGKAb/VE2Az
c19SifWMPLMcybpYvhK+umf83Ti5FVyAZQjJvIxIiKTU1wl6UKGTewPYYzcd/s4y
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3767007579545388531133942802605666602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jones Lang LaSalle Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.joneslanglasalle.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21639801373552184232353255973271203848879897416909684124200024168965662230718253327713598207930881992516136010621802514476988667467722346716929354121918992284673730010611319767955825672826141359008064419740677551099280075250525491915710392981600597668469750130269751557869798345227950466916172024014833937015922792044430636115975645382441091468442956794260980607280818476851676080347224836375364886042834693562079960541736653557271453352367224646264488876404666201924404495919662893760862572723369257406368084992594989629352144081694027771835779290827938275850369257182247615476669776736508476193708364178911986070177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4adabca9cfbd8a865978ae8e384bf7bc733d5157
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1948 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30aniversario.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aanbod.jll.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clienthub.eu.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console-production-01.jll-labs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delphilil.am.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esp.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gerenciamento.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewerbeimmobilien.jll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-paris.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmuebles.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jll-nemovitosti.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllproperty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jllproperty.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joneslanglasalle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-all.manage.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.home.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.manage.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markets360.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxinst.manage.jll04.tasmas-sandbox.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriindev.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mriinprd.ap.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonesettings.am.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property.jll.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'py.oneviewfinancials.joneslanglasalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.africa.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grand-paris.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll-mena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jll.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllcampaigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllsweden.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jllvaloraciones.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joneslanglasalle.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latinamerica.jll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markets360.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mdlp81.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merrittandharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property.jll.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.us.jll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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