ereturn.usa.canon.com

- Canon U.S.A., INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:7f:10:e1:44:fc:a9:12:5c:dd:0f:fc:21:d7:38:c9 was issued on by DigiCert Inc.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Canon U.S.A., INC.

Organization: Canon U.S.A., INC.
State / Province: New York
Locality: Melville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:10:e1:44:fc:a9:12:5c:dd:0f:fc:21:d7:38:c9
Serial Number (int): 4647448054629323256800407637101852873
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 50:ba:c5:e0:7f:8a:d4:30:06:7c:67:03:c3:c5:c1:74:74:73:ec:d6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e7:c3:df:ef:df:5f:48:57:99:fd:1a:70:ff:24:3a:b9:f2:00:c7:e6
Fingerprint (sha256): 02:ba:05:e4:ac:6e:1c:7e:34:66:47:e0:1d:c3:6e:a2:bc:e8:a0:b3:cf:c6:44:aa:2f:65:4c:0d:c2:03:f5:3f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ereturn.usa.canon.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ereturn.usa.canon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ereturn.usa.canon.com
canonalumniconnection.cusa.canon.com
canon-biomedical.com
carepak.canon.com
cinemaeos.usa.canon.com
competitivepurchasing.com
devcom.usa.canon.com
developercommunity.usa.canon.com
ebb.cusa.canon.com
ecarepak.usa.canon.com
employeerecognition.cusa.canon.com
enablingcreativity.usa.canon.com
expo.usa.canon.com
forum.virtualimaging-fl.com
ftp.virtualimaging-fl.com
gamutcampus.com
gamutdestinations.com
glassfirst.com
glassfirst.usa.canon.com
gseriescameras.usa.canon.com
lenses.usa.canon.com
mediaevent.usa.canon.com
mseriescameras.usa.canon.com
networkcameras.usa.canon.com
onesimplecontract.com
paperlessideas.net
powershot.com
print.usa.canon.com
printinginnovations.cusa.canon.com
printondemand.cusa.canon.com
pro.usa.canon.com
proprinter.usa.canon.com
rebates.usa.canon.com
registercanon.com
seeimpossible.usa.canon.com
sensors.usa.canon.com
simplifiedprocurement.com
supportmatters.pro.usa.canon.com
switchyourpress.com
switchyourprinter.com
test.canonesp.com
test.canonlenses.com
varioprint.net
variostream.net
www.2minpcr.com
www.canon-biomedical.com
www.canonalumniconnection.cusa.canon.com
www.cinemaeos.usa.canon.com
www.competitivepurchasing.com
www.ecarepak.usa.canon.com
www.encuesta.3.cla.canon.com
www.ereturn.usa.canon.com
www.expo.usa.canon.com
www.gamutcampus.com
www.gamutdestinations.com
www.glassfirst.com
www.glassfirst.usa.canon.com
www.lenses.usa.canon.com
www.networkcameras.usa.canon.com
www.onesimplecontract.com
www.powershot.com
www.print.usa.canon.com
www.printinginnovations.cusa.canon.com
www.pro.usa.canon.com
www.proprinter.usa.canon.com
www.registercanon.com
www.seeimpossible.usa.canon.com
www.sensors.usa.canon.com
www.simplifiedprocurement.com
www.switchyourpress.com
www.varioprint.net
www.variostream.net
flashclassroom.usa.canon.com
www.swagshop.usa.canon.com
projectors.usa.canon.com
canontechsupport.com
advcloud.cusa.canon.com

Other certificates including the domain name canon.com

(limited to 100 certificates)
secure07.stage.lithium.com
quickscan.ciis.canon.com
magentoapi.usa.canon.com
canammobileconnect.usa.canon.com
nwstg.cusa.canon.com
lfsstorefront.com
*.dev-apps.cusa.canon.com
www.cfsdealerportal.com
nyrhdz21.cusa.canon.com
WMBMQPRD.cusa.canon.com
commerce.mylan.csa.canon.com
cusa.canon.com
taxserviceqa.usa.canon.com
secure1.canon.com
essdmtes1qa.cusa.canon.com
nyrhdz20.cusa.canon.com
s21fsrcbrqa.cusa.canon.com
access.ciis.canon.com
Replenish.usa.canon.com
thinkinkdigital.com
www.employee-rewards.cusa.canon.com
secure1.canon.com
essdmtes2qa.cusa.canon.com
ecarriers.csa.canon.com
www.developersupport.canon.com
canonusaextranets.cusa.canon.com
chatbot-dev.ciis.canon.com
www.cla.canon.com
mps.cbps.canon.com
contentqa.cusa.canon.com
www.developersupport.canon.com
ereturn.usa.canon.com
www.support.cusa.canon.com
csa.canon.com
secure04.lithium.com
adseast.solutions.canon.com
msdjira.sc.rd.canon.com
s21.cusa.canon.com
ereturn.usa.canon.com
secure04.lithium.com
s21fsrcbrop.cusa.canon.com
ereturn.usa.canon.com
shop.usa.canon.com
shop.dev.csa.canon.com
mycanon.stg.cusa.canon.com
events.biggestfantour.com
shopqa-auth.cusa.canon.com
cdf.dt-ext.vpn.ciis.canon.com
learn.usa.canon.com
shop.usa.canon.com
imagination.usa.canon.com
web1cdvny.cfs.canon.com
esbprd.cusa.canon.com
ereturn.usa.canon.com
thinkinkdigital.com
secure04.lithium.com
globaldispatchsolution.api.esb.usa.canon.com
ccldev.cusa.canon.com
www.servicetrainingsolutions.cusa.canon.com
adscentral.solutions.canon.com
preview.partnernet.usa.canon.com
canonva.cvi.canon.com
cvi.canon.com
rtbcx.jp.canon.com
VAARCOTFORT.CUSA.CANON.COM
in-fedservice.cusa.canon.com
unbe.sxg.cusa.canon.com
ciis.canon.com
vapgp01.cusa.canon.com
cpfprismadirect.cusa.canon.com
akamai-san195.exacttarget.com
magentocloud37.map.fastly.net
www.cla.canon.com
esbqa-2.cusa.canon.com
raise.usa.canon.com
magentocloud52.map.fastly.net
www.developersupport.canon.com
secure11.lithium.com
mycsa.s21qa.csa.canon.com
ess1.csa.canon.com
lsarprx.cusa.canon.com
upload-photos.dtp-community.usa.canon.com
shortstack.usa.canon.com
email2.cusa.canon.com
varhdv117.cusa.canon.com
www.support.cusa.canon.com
secure11.lithium.com
impact-uat.csa.canon.com
kbsupport.cusa.canon.com
events.ciis.canon.com
ereturn.usa.canon.com
cfsdealerportal.com
taxservice.usa.canon.com
secure07.stage.lithium.com
*.cusa.canon.com
www.support.cusa.canon.com
travelexpensecusaqa.cusa.canon.com
oneweb.api-stg.esb.usa.canon.com
mnyacs1121.cusa.canon.com
smarterdocs.corp.cbps.canon.com

Certificate

The complete raw certificate details for ereturn.usa.canon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqxjv6rymLeT3hDOO8YM
yuJjuJ7B3N/Fu+U8N9XugY0nYpBUkbPkmyOCWJDNeG9i8x+9PGIdNPtXrLi36Dvn
3IVmuFWTd1yDxzRaOZstgoiifrZSlClffyWAs14yc5E8DugneIJ7b906yrRffYwv
ehjbSJbgqlmq5i/9oEGmROzY47in8kDLYQJ4FVPbiTJQGmjurOIz2MFszOQBCo0H
q0v9UtVvPa77z2jrfId03dLoMsPl1xGDowYEodsd6GNvA40TTC4jMcm0biuc1s1d
dgPtHgt2eBFVm1D9XgP3WG8dTwRkv4o/nKgh5a9oT9xDGWVUsRGlIL+883g9+Xla
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4647448054629323256800407637101852873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Melville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canon U.S.A., INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ereturn.usa.canon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24575239664870363765205844972935688215164736962789080811031280840699955439627273409350079057036736021895890996403268897968530248746579040596112314535706329799401259802641829814711597833370891928354288455392941525335291679708069817103917106649279610958341110642401878154478367614873228032757911781147741855765365475889634887230818744514269112404207632697797424055796731956953383574092724371085145851765979137320758759754291967981358522528890042769029562599982449811328217501565446178605878090885852272071253961053995359137264580455473358714743283959998366750652750579629758415598703852222131580980945374750610476849683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50bac5e07f8ad430067c6703c3c5c1747473ecd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1974 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereturn.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canonalumniconnection.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canon-biomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carepak.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemaeos.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'competitivepurchasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcom.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developercommunity.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebb.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecarepak.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeerecognition.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enablingcreativity.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expo.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.virtualimaging-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.virtualimaging-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamutcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamutdestinations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassfirst.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gseriescameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenses.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaevent.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mseriescameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkcameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesimplecontract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paperlessideas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powershot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printinginnovations.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printondemand.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proprinter.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebates.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registercanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeimpossible.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensors.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplifiedprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmatters.pro.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchyourpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switchyourprinter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.canonesp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.canonlenses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varioprint.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'variostream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2minpcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canon-biomedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canonalumniconnection.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinemaeos.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.competitivepurchasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecarepak.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encuesta.3.cla.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ereturn.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expo.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamutcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamutdestinations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glassfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glassfirst.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lenses.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.networkcameras.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onesimplecontract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powershot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.print.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printinginnovations.cusa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pro.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.proprinter.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registercanon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeimpossible.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sensors.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplifiedprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.switchyourpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varioprint.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.variostream.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashclassroom.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swagshop.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectors.usa.canon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canontechsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advcloud.cusa.canon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008a3a249644043614e931f9e21a28d6a40a29ab61cf74094da9f64bbe576a0fb04072e5aef1803817210e4886c852fa97c18adee52a45e50b862d68c8fa8a6ed5c95bdd094cffa2ba3f72d5904420afdf79d166d8ec95a0dddf923caf01328ab9705f604fce487cce29eab034626a6460b56dc17942b5db7c0efc21423d7843e800c85d0821eaa1333edc9ac62ff156a3061d81754cc50104a5eae9e7ea55a3b18a98f32ecc656b46cc5ad4404fce55864960aa20599458c64e947152e9822b4c75f83c01d83fec44bffdf07ff1c44cb64798a614f16d704ca21bd55ffd64b751441369fa39ff314879ff570d27efa6c69fd38b5b7a68d772d939cf266f0ebae5