Version: v3 Serial Number: 19849318194954589546499480454981179187 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc Organizational Unit: www.digicert.com CommonName: GeoTrust RSA CA 2018 Validity: Not Before: 2020-04-14 00:00 UTC Not After : 2021-07-14 12:00 UTC Subject: Country: KR Province: Seoul Locality: Seoul Organization: FLITTO Inc. CommonName: *.fltcdn.net Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 90:58:FF:B0:9C:75:A8:51:54:77:B1:ED:F2:A3:43:16:38:9E:6C:C5 Subject Key Identifier: 81:A6:A6:5F:A9:C1:E1:07:D0:C4:CA:38:5B:53:44:4C:5E:B4:9C:82 CRL Distribution Points: http://cdp.geotrust.com/GeoTrustRSACA2018.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://status.geotrust.com Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: *.fltcdn.net fltcdn.net Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 12197873480181213073009250525869875702 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert TLS RSA SHA256 2020 CA1 Validity: Not Before: 2022-03-27 00:00 UTC Not After : 2023-03-28 23:59 UTC Subject: Country: US Province: Pennsylvania Locality: Exton Organization: IPipeline, Inc CommonName: *.ipipeline.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4 Subject Key Identifier: 10:4D:0E:0E:70:A1:7E:D9:28:07:65:38:87:4D:1D:6B:7D:6C:9B:58 CRL Distribution Points: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: *.ipipeline.com ipipeline.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 248890831492338824778853111407283709786678713116 Signature Algorithm: SHA256-RSA Issuer: Country: BM Organization: QuoVadis Limited CommonName: QuoVadis Global SSL ICA G3 Validity: Not Before: 2021-01-27 10:49 UTC Not After : 2022-01-27 10:59 UTC Subject: Country: CH Province: Zurich Locality: Zurich Organization: Schweizerische Rückversicherungs-Gesellschaft AG CommonName: www.swissrefoundation.org Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits) : BA:D7:2A:6F:CA:22:30:94:CA:D1:88:DF:5B:5B:AE:9E: 5D:C3:E4:32:BC:A1:9E:2B:DA:F6:6B:B6:69:96:B1:26: D2:1C:2D:20:F3:4A:29:67:12:58:31:54:B3:2A:A8:FE: 1F:5E:8F:0A:D2:1F:D9:20:A0:29:E9:77:2A:E1:D1:74: AD:15:9E:48:13:F3:E2:2B:EC:FC:4C:08:19:8E:30:3B: 8F:20:3E:50:13:50:1C:53:7F:B7:94:A3:11:44:DF:D7: E9:B8:29:98:F3:25:F4:C7:A4:63:37:46:5B:3E:B4:4F: 2B:02:E6:91:01:18:CC:C1:D9:D4:03:F8:D4:27:43:D7: CD:0E:B8:1B:D2:D8:74:35:40:F1:66:58:77:A8:76:5F: 81:70:7D:1F:30:2C:7D:0B:18:5A:C8:CC:E3:EC:E0:80: 4B:24:E1:39:1B:9A:10:58:22:0B:A4:4C:86:66:B1:F8: 7B:6A:7A:B2:A8:36:2D:FA:19:7B:3E:B4:8E:EE:62:F4: C7:20:C3:5B:89:19:75:DD:93:50:C9:C2:D9:35:35:0E: 8A:CD:DD:3A:B0:3C:25:1D:2B:C7:14:E8:A7:55:83:0E: 4E:12:0D:2D:1C:BD:57:FC:00:C9:56:51:8D:5E:C0:05: BA:61:DE:63:04:FE:1D:64:9D:F0:5F:7E:D4:35:A9:CF Authority Key Identifier: B3:12:89:B5:A9:4B:35:BC:15:00:F0:80:E9:D8:78:87:F1:13:7C:76 Subject Key Identifier: 6D:35:1D:9C:60:24:80:F3:EE:E0:5D:C6:2A:28:6B:2F:DE:D2:2F:6A CRL Distribution Points: http://crl.quovadisglobal.com/qvsslg3.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.quovadisglobal.com Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Client Auth Server Auth DNS Names: www.swissrefoundation.org stage.www2.swissrefoundation.org media.swissrefoundation.org www2.swissrefoundation.org dev.www.swissrefoundation.org dev.www2.swissrefoundation.org stage.www.swissrefoundation.org Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 1358164301464882927623460896072003410 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert TLS RSA SHA256 2020 CA1 Validity: Not Before: 2024-02-26 00:00 UTC Not After : 2025-02-26 23:59 UTC Subject: Country: US Province: California Locality: Los Angeles Organization: CENTERFIELD MEDIA PARENT, INC. CommonName: www.savings.com Subject Public Key Info: Public Key Algorithm: ECDSA Public Key: F9:C3:D3:1C:64:BC:D6:A4:DF:7F:DF:52:62:35:81:E0: 95:56:FC:99:FC:46:0C:E6:CA:01:B1:EB:FA:40:B2:CB: A6:FA:44:77:FB:B1:44:19:36:77:50:04:7F:59:5A:EF: A3:B9:C3:F4:F8:EE:99:88:16:96:C7:AB:20:B1:8B:46 Authority Key Identifier: B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4 Subject Key Identifier: 64:75:62:94:B0:E7:86:19:A6:C0:C3:C6:51:3D:26:28:7D:2D:89:23 CRL Distribution Points: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt Key Usage: Digital Signature Key Agreement Extended Key Usage: Server Auth Client Auth DNS Names: www.savings.com cdn.savings.com cdn.sdccdn.com node1.sdccdn.com node2.sdccdn.com node3.sdccdn.com savings.com www.savoo.ca www.savoo.co.uk www.savoo.com.au www.savoo.com.br www.savoo.com.mx www.savoo.de www.savoo.es www.savoo.fr www.savoo.it www.savoo.nl Certificate Signature Algorithm: SHA256-RSA Certificate Signature: 45:33:94:B9:9F:D7:23:C2:1C:6F:25:0B:A2:35:E5:76: 4F:32:8A:62:7A:75:17:D0:85:BD:19:38:EF:6D:8C:3F: A3:B6:3D:F1:97:77:DF:66:92:4E:D7:EB:BD:31:0C:54: AE:B1:9E:27:CA:96:2E:26:D9:8A:17:C0:BB:AC:A3:03: 5D:C5:22:BB:E3:B4:FF:74:A7:BF:76:1D:F9:CD:5A:46: 76:54:AA:A0:09:78:D1:05:79:F0:23:F5:C5:AC:1D:4B: C7:B1:DB:8B:8B:B2:3D:4A:33:A1:92:9F:BD:DE:18:4D: 80:84:5D:CC:1C:F2:EF:D0:87:4D:0E:79:8C:BB:DC:8A: 45:56:6B:8C:5C:3A:71:B7:A5:65:93:50:E7:DE:F5:71: 66:99:B4:3D:F9:40:46:EC:B5:01:3A:49:73:EC:5A:20: 2B:45:BB:1C:21:5C:34:47:AF:08:22:15:3A:75:2E:08: 91:90:D3:7B:5F:83:33:26:59:92:0B:A4:A5:25:DC:2D: B9:C6:04:B4:35:0D:F4:58:F9:49:AA:EE:09:5B:F1:0E: AA:91:94:1E:D2:61:D5:AE:B1:C5:28:4F:49:18:B5:7A: 83:46:9D:01:86:D1:D5:DC:E7:78:40:CE:B3:2D:5D:5E: 24:90:9A:DA:D6:43:D3:8E:01:6A:2B:BE:2B:87:F7:D2

Version: v3 Serial Number: 8675322322142519428486949570259216177 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert TLS RSA SHA256 2020 CA1 Validity: Not Before: 2024-08-21 00:00 UTC Not After : 2025-03-18 23:59 UTC Subject: Country: IN Province: Maharashtra Locality: Pune Organization: Bajaj Finance Limited CommonName: bajajfinserv.in Subject Public Key Info: Public Key Algorithm: ECDSA Public Key: E8:AC:61:37:09:C9:6B:A9:75:91:74:FA:E4:A5:7A:10: 26:7B:61:A0:5B:85:49:BB:A9:E7:F0:ED:DE:AA:1C:F3: 0F:76:CC:40:CE:C6:F4:08:05:AF:A7:35:F5:95:4E:FD: 55:2B:E6:DB:F5:03:A5:27:28:B8:7E:4E:C5:0F:56:7A Authority Key Identifier: B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4 Subject Key Identifier: B6:97:33:19:6B:4A:C5:9E:9F:AD:67:F7:0A:35:F3:94:87:9E:FE:E6 CRL Distribution Points: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt Key Usage: Digital Signature Key Agreement Extended Key Usage: Server Auth Client Auth DNS Names: bajajfinserv.in 3in1api1.bajajfinance.net 3in1api2.bajajfinance.net 3in1api3.bajajfinance.net aboutbajajfinserv.com aboutbajajfinserv.in adfs.bflapps.in admin.bhil.in admin.sabkamall.in api-admin.sabkamall.in api.sabkamall.in apiprod.bflapps.in apitest.bflapps.in apply-for-business-loan.bajajfinserv.in apply-for-home-loan.bajajfinserv.in apps.bajajfinservlending.in av.bflapps.in b-open.bajajfinserv.in b2c.bajajfinserv.in bajajfinance.com bajajfinance.net bajajfinservlending.in beta.bajajfinserv.in bfin.in bfldmsftps.bflapps.in bflhts.bajajfinserv.in bhil.in blog.bajajfinserv.in business-loan.bajajfinance.com business-login.bajajfinserv.in collection.bajajfinserv.in communications.bajajfinserv-payments.com cont2-sites.bajajfinserv.in cs-service.sabkamall.in d.bfin.in dev-aem.aboutbajajfinserv.com dlp.bflapps.in domain.bajajfinserv-payments.com dxl.bflapps.in emi-cards.bajajfinserv.in emi.in esign.bajajfinserv.in expe1.vc.bajajfinserv.in expe2.vc.bajajfinserv.in expe3.vc.bajajfinserv.in fapp1.learn.bajajfinserv.in findyourbeat.bajajfinserv.in frameslife.bajajfinserv.in housingfinance.bajajfinserv.in join.vc.bajajfinserv.in loan-customers.bajajfinance.com mahascooters.com mailers.bajajfinserv.in mails.bajajfinserv-payments.com middleware.sabkamall.in mobapps.bajajfinserv.in mobilecs.bajajfinserv.in mobuat.bflapps.in mwprod.bflapps.in mwuat.bflapps.in mylogin.bajajfinance.com mysite.bajajfinservlending.in online-loan.bajajfinance.com online-personal-loan.bajajfinserv.in online.bajajfinserv.in password.bajajfinservlending.in payment.bajajfinserv.in personal-loan.bajajfinserv.in qa-aem.aboutbajajfinserv.com qa-oneweb-business.bajajfinserv.in qa-oneweb.aboutbajajfinserv.com report.bajajfinserv.in rfs.bflapps.in router.sabkamall.in sabkamall.in stage-aem.aboutbajajfinserv.com u.bfin.in uat-aem.aboutbajajfinserv.com uat-oneweb-business.bajajfinserv.in uat-oneweb.aboutbajajfinserv.com uatb2c.bajajfinserv.in uathomes.bajajfinserv.in unsub.learn.bajajfinserv.in wcmdev.bajajfinserv.in www.aboutbajajfinserv.com www.aboutbajajfinserv.in www.bajajfinance.com www.bajajfinserv.in www.bajajfinservemimall.in www.bajajfinservemimalls.org www.bfscareers.in www.bhil.in www.emi.in www.emirewards.bajajfinserv.in www.mahascooters.com www.onefinservtalent.in www.online.bajajfinserv.in www.sabkamall.in www.uathomes.bajajfinserv.in Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 8338801468203877056754704311667612417 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert SHA2 Secure Server CA Validity: Not Before: 2020-04-01 00:00 UTC Not After : 2021-07-01 12:00 UTC Subject: Country: US Province: Illinois Locality: Chicago Organization: Allscripts Healthcare, Llc. Organizational Unit: Information Technology CommonName: www.extendedcare.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2 Subject Key Identifier: 68:AE:C2:18:A6:DB:AF:4E:13:B0:55:5B:B8:FB:DE:4E:60:16:5E:AD CRL Distribution Points: http://crl3.digicert.com/ssca-sha2-g6.crl http://crl4.digicert.com/ssca-sha2-g6.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: www.extendedcare.com extendedcare.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 5616169239559312847433857036336568704 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert TLS RSA SHA256 2020 CA1 Validity: Not Before: 2024-07-17 00:00 UTC Not After : 2025-07-17 23:59 UTC Subject: Country: GB Locality: London Organization: SIMPLICITY MARKETING LIMITED CommonName: servedby.flashtalking.com Subject Public Key Info: Public Key Algorithm: ECDSA Public Key: AB:5B:77:2D:F1:9D:4C:9A:7B:D0:FF:02:17:9F:63:2C: 24:F5:3D:71:5F:B5:18:35:0F:AB:C2:0A:45:6C:44:46: A2:40:68:C6:06:52:CD:BD:83:B8:7E:F4:25:86:C8:C4: C6:6A:97:5F:0C:A4:06:87:BC:CD:8E:CC:AA:8E:A2:67 Authority Key Identifier: B7:6B:A2:EA:A8:AA:84:8C:79:EA:B4:DA:0F:98:B2:C5:95:76:B9:F4 Subject Key Identifier: F9:22:C3:83:CC:94:0E:BF:8B:A2:E3:F5:14:59:9F:CB:0D:00:65:51 CRL Distribution Points: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt Key Usage: Digital Signature Key Agreement Extended Key Usage: Server Auth Client Auth DNS Names: servedby.flashtalking.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 10151132669869687014276175158029597718 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc CommonName: DigiCert SHA2 Secure Server CA Validity: Not Before: 2024-07-24 00:00 UTC Not After : 2025-08-15 23:59 UTC Subject: Country: CA Province: Ontario Locality: Toronto Organization: Canadian Imperial Bank of Commerce CommonName: fx.cibc.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2 Subject Key Identifier: 91:90:D9:B5:F8:5A:54:9A:BB:75:9E:A5:EB:87:4B:5F:3A:68:94:BA CRL Distribution Points: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://ocsp.digicert.com Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: fx.cibc.com stratus.fx.cibc.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

Version: v3 Serial Number: 13935813078293066163379791183497455651 Signature Algorithm: SHA256-RSA Issuer: Country: US Organization: DigiCert Inc Organizational Unit: www.digicert.com CommonName: GeoTrust RSA CA 2018 Validity: Not Before: 2024-10-24 00:00 UTC Not After : 2025-05-01 23:59 UTC Subject: Country: US Province: Illinois Locality: Chicago Organization: Northern Trust Corporation CommonName: www02710.ntrs.com Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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uthority Key Identifier: 90:58:FF:B0:9C:75:A8:51:54:77:B1:ED:F2:A3:43:16:38:9E:6C:C5 Subject Key Identifier: 1B:EB:BE:AC:9B:BE:B5:0B:01:30:06:A6:00:26:24:AA:DA:3E:E9:D9 CRL Distribution Points: http://cdp.geotrust.com/GeoTrustRSACA2018.crl Basic Constraints: CA : false Path Length Constraint: UNLIMITED OCSP Server: http://status.geotrust.com Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt Key Usage: Digital Signature Key Encipherment Extended Key Usage: Server Auth Client Auth DNS Names: www02710.ntrs.com 125.northerntrust.com 125.ntrs.com advisors.northernfunds.com ark03.omnium.com asia.aviatelive.com business.northerntrust.com cdn.uat.northerntrust.com cdn.uat.ntrs.com corporate.cdn.uat.northerntrust.com corporate.cdn.uat.ntrs.com corporate.web-xp2a-pws.ntrs.com europe.aviatelive.com individual.northernfunds.com institutional.northernfunds.com investor.omnium.com investorportal.ntrs.com live.northerntrust.com live.ntrs.com login.ntrs.com m.northerntrustopen.com m.privatepassport.ntrs.com ndc.ntam.northerntrust.com northernfunds.ntrs.com northerninstitutionalfunds.ntrs.com northerntrust.com omniumaccess.omnium.com retirement.northerntrust.com retirement.ntrs.com riskandperformance.northerntrust.com riskandperformance.ntrs.com us.aviatelive.com utc.ntrs.com wealth.ntrs.com wealthadvisor.northerntrust.com web-xp2a-pws.ntrs.com web-xp2b-pws.northerntrust.com web-xp2b-pws.npc.ntrs.com web-xp2b-pws.ntrs.com web-xp2b-pws.wpc.ntrs.com web-xp2c-pws.ntrs.com web-xp2d-pws.ntrs.com web-xp2e-pws.ntrs.com web-xp2f-pws.ntrs.com web-xp2k-pws.ntrs.com www.50southcapital.com www.aviatelive.com www.beladv.com www.benefitnow.ntrs.com www.business.northerntrust.com www.fiftysouthcapital.com www.northern-funds.com www.northernmutualfunds.com www.northerntrust.jp www.northerntrustbank.com www.northerntrustfunds.com www.northerntrustopen.com www.ntrs.com www.reliabilityinvestment.ntrs.com www.retirement.northerntrust.com www.retirement.ntrs.com www.riskandperformance.northerntrust.com www.riskandperformance.ntrs.com www01510.ntrs.com www03310.ntrs.com www03410.ntrs.com www03910.ntrs.com www04010.ntrs.com www05510.ntrs.com www06210.ntrs.com www07010.ntrs.com www14610.ntrs.com www15010.ntrs.com www20010.ntrs.com www20310.ntrs.com www21710.ntrs.com www22511.ntrs.com www3383.ntrs.com wwwc.ntrs.com wwwc078.ntrs.com wwwc080.ntrs.com wwwdcc.ntrs.com wwwesi83a.ntrs.com wwwp14.ntrs.com wwwptl00.ntrs.com wwwptl02.ntrs.com wwwptl04.ntrs.com wwwptl07.ntrs.com wwwptl12-r5.ntrs.com wwwptl14-exl.ntrs.com wwwptl14-r5.npc.ntrs.com wwwptl14-r5.ntrs.com wwwptl14-r5.wpc.ntrs.com wwwptlpsi2ssl.ntrs.com wwwptlpsissl.ntrs.com wwwsecuridesi83a.ntrs.com wwwt891.ntrs.com wwwwca11.ntrs.com Certificate Signature Algorithm: SHA256-RSA Certificate Signature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