san-21-s12.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:f4:71:25:22:2b:5b:24:90:e2:75:4d:6e:ab:64:2a was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f4:71:25:22:2b:5b:24:90:e2:75:4d:6e:ab:64:2a
Serial Number (int): 14561495245633786890979833751695746090
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:fb:16:cf:e2:2c:1d:58:d7:97:fa:8c:14:49:a3:2b:77:2b:fb:5e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 97:25:dc:57:76:30:7c:85:b1:73:1f:47:27:b6:28:08:1e:94:9d:c0
Fingerprint (sha256): 02:a4:5a:c0:08:37:e9:f1:15:12:8c:63:15:f3:9e:3c:63:1b:f9:90:a5:b7:48:2d:b8:05:83:40:2e:f6:24:38

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-21-s12.tlsprovisioning.exacttarget.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-21-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-21-s12.tlsprovisioning.exacttarget.com
image.youropinionpolling.com
image.victorymailings.com
image.twglobalmall-crm.com
image.sales.educationaldesignsolutions.com
image.conservativeintelalerts.com
image.buildourmovement.com
image.backingamericanow.com
image.info.nzx.com
image.email.t-mobilefiber.com
image.cccorporativo.com
image.comms.ed.exceedigital.com.au
image.homerunrewards.cstoresavings.com
image.info.innovationcarepartners.com
image.info.masslottery-communications.com
image.bluewaterrewards.cstoresavings.com
image.email.everlightsolar.com
image.email-ezanchorpuller.com
image.atlantisrewards.cstoresavings.com
image.shortstoprewards.cstoresavings.com
image.daspeweb-mkt.com
image.ma.belluna.jp
image.ma.ryuryumall.jp
image.email.frontiersawmills.com
image.emails.pbhfoundation.org
image.mktg.digicelinternational.com
image.my.oc-cf.org
image.conteudo.microtecnica.com.br
image.email.bettycrocker.com
image.email.cjfashion.com
image.email.pekininsurance.com
image.m.smile-zemi.com
image.mail.lifenet-seimei.co.jp
image.mail.ymcamemphis.org
image.mc.collage.com
image.medicareinfo.cigna.com
image.email.shine.com.au
image.comunicacao.petrobras.com.br
image.sf.nssco.com
image.customercommunications.csx.com
image.e.gmgneverrests.com
image.edu.wcei.net
image.i.leadership.deakin.edu.au
image.i.onlinenursing.holyfamily.edu
image.i.studyonline.unsw.edu.au
image.insure.marqueeig.com
image.mail2.dealersight.net
image.my.gopineapple.com
image.saintgobainconstrucao.com.br
image.sfemail.colonybank.com
image.comunicaciones.taxonera.com
image.comunicaciones.terza.com
image.destaque.unisa.com.br
image.e.gorenje.com
image.e.isufoundation.com
image.employeecomms.mta.org
image.go2.nsf.gov
image.info.cwknetwork.com
image.mailers.aisglass.com
image.mkt.santodigital.com.br
image.my.gosummer.com
image.nestle.jp
image.rewards.redbarnmkt.com
image.tauckemail.com
image.customercare.adrianasinsurance.com
image.tolucafcdata.com
image.edu.reliasacademy.com
image.edu.reliasmedia.com
image.education.freecme.com
image.education.nurse.com
image.email.mainstreet.com
image.mail.usaswimming.org
image.comunica.jeitto.com.br
image.draftkings-vip.com
image.e.reddsummit.com
image.suppliercentralcomms.coles.com.au
image.care.boystown.org
image.marketing.nomura.com
image.conteudo.dynamox.net
image.coopminutodedios.com.co
image.neoenergiabrasilia.com.br
image.neoenergiacoelba.com.br
image.neoenergiacosern.com.br
image.neoenergiaelektro.com.br
image.neoenergiapernambuco.com.br

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-21-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rmU2JxpcpKcK4L0w9ae
fmfg4HtiHJtDhuJ3E/U2JRddqQ4MNUzxJYcG1ez4gz7EsBReb+zApA6JkcxTBkUm
FGNZqYuryqABS9UmSq0GiilyGUudmbabVpyxLixfErTOGXyM77Itx6IwOCWER8Y9
2JVWYQgIf8Zjh2OKNO5NDfX89/c2dSf7cTaL33KL4jIMVXGpz0KEBtjl8tEjpU5h
Wgh90t2loG3sKvzS3pcVZAFRUg+pUox43COPKS+HLUNELEIWT9PdvZGSxuL7w3yY
r6LD8H/ECtjDWfEeTGOUc81FWdFcBcuQT59leOsi5fxtxyBUfes6J7kNaBjhtGaS
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14561495245633786890979833751695746090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-21-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29126323756194715553076672970459368740508486785035382926700388324080045654646838089865344152736078641344471022305510916856403441825931300344331861500031907463870304573032602891240073474398168148923191695669901211379878553792756692186059882714133865319976608369197278277406059523597758222013939614474479966791474655525548988145661978803421095555274168821599006690850387785363584797946930309106395928423381595699758465834155836135250720236638177160070501477145570883811349921883680950925148551913345296622630090141085643620157936987740142831895987925293717704435657277588097249176096141216997068641440824078661906240143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ffb16cfe22c1d58d797fa8c1449a32b772bfb5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-21-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.youropinionpolling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.victorymailings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twglobalmall-crm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.educationaldesignsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conservativeintelalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.buildourmovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.backingamericanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.nzx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.t-mobilefiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cccorporativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.ed.exceedigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.homerunrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.innovationcarepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.masslottery-communications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bluewaterrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.everlightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-ezanchorpuller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.atlantisrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shortstoprewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.daspeweb-mkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.belluna.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.ryuryumall.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.frontiersawmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pbhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.digicelinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.oc-cf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.microtecnica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cjfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pekininsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.smile-zemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lifenet-seimei.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ymcamemphis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.collage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicareinfo.cigna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.petrobras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.nssco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customercommunications.csx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gmgneverrests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.wcei.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.leadership.deakin.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.onlinenursing.holyfamily.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.studyonline.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insure.marqueeig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail2.dealersight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.gopineapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.saintgobainconstrucao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfemail.colonybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.taxonera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.terza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.destaque.unisa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gorenje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.isufoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.employeecomms.mta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go2.nsf.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cwknetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailers.aisglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.santodigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.gosummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rewards.redbarnmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tauckemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customercare.adrianasinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tolucafcdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.reliasacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.reliasmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.education.freecme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.education.nurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mainstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.usaswimming.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunica.jeitto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.draftkings-vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.reddsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.suppliercentralcomms.coles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.care.boystown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.nomura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.dynamox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.coopminutodedios.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiabrasilia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiacoelba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiacosern.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiaelektro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiapernambuco.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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