cs-sm.medallia.com

Issued by SSL.com DV CA

About this certificate

This digital certificate with serial number e0:8f:d0:5e:f3:28:52:7b:41:8c:86:90:66:a4:41:0a was issued on by SSL.com.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cs-sm.medallia.com,OU=Domain Control Validated

SSL.com

Organization: SSL.com
Organization unit: www.ssl.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e0:8f:d0:5e:f3:28:52:7b:41:8c:86:90:66:a4:41:0a
Serial Number (int): 298493795770490075696724408607527158026
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ef:ae:58:fc:3b:8c:7e:b6:41:43:05:0e:0a:9a:19:ae:02:32:03:b1
AuthorityKeyId: 46:9a:fd:fc:51:5e:7c:54:53:52:e2:99:e3:b3:32:ef:93:1a:7f:56

Fingerprint (sha1): eb:8d:bd:3b:11:c9:9d:c9:fb:2f:7e:64:ef:b7:26:f3:5f:c4:04:0f
Fingerprint (sha256): 04:34:21:b8:61:86:68:3a:a9:48:be:03:39:cc:a3:48:3d:91:7c:09:39:d3:8f:e4:24:18:2c:c9:72:7e:46:b3

Issuing Certificate URL: http://crt.ssl.com/SSLcomDVCA_2.crt

Revocation information

OCSP Server: http://ocsp.ssl.com
CRL Distribution Point: http://crl.ssl.com/SSLcomDVCA_2.crl

Check the revocation status for certificate cs-sm.medallia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-sm.medallia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs-sm.medallia.com

Other certificates including the domain name medallia.com

(limited to 100 certificates)
*.aws-stg.medallia.com
1e291ab3status.snowflake.com
e2.shared.global.fastly.net
*.medallia.com
dns-vetting1c.map.fastly.net
es.medallia.com
*.sbx.usps.medallia.com
blog.medallia.com
*.jiveon.com
pt.medallia.com
1e291ab3status.snowflake.com
jobs.medallia.com
medallia.com
*.usps.medallia.com
*.digital-qa2.medallia.com
e2.shared.global.fastly.net
www.medallia.com
bp1054598.saagie.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
e2.shared.global.fastly.net
sales.medallia.com
medallia.com
*.md-apis.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.sbx.den.medallia.com
e2.shared.global.fastly.net
ocem-assessment-b2b.medallia.com
g2.shared.global.fastly.net
*.digital-cloud-syd1.medallia.com
*.digital-cloud-bofa.medallia.com
e2.shared.global.fastly.net
*.crowdicity-us1.medallia.com
*.sbx.sc4.medallia.com
*.eng.medallia.com
radius.medallia.com
e2.shared.global.fastly.net
*.iad1.medallia.com
bunnings-surveyauth-qa.customapps.medallia.com
blog.medallia.com
cvs-surveyauth-qa.customapps.medallia.com
bankofamerica.medallia.com
e2.shared.global.fastly.net
e2.shared.global.fastly.net
statuspage.io
statuspage.io
g2.shared.global.fastly.net
medallia.com
*.appsol.medallia.com
*.aws-stg.medallia.com
metrics.medallia.com
bp1054598.saagie.com
statuspage.io
*.apis.crt-qa1.den.medallia.com
zulu.tau.medallia.com
g2.shared.global.fastly.net
product-descriptions.medallia.com
cs-sm.medallia.com
*.sbx.fedw1.medallia.com
*.jed1.medallia.com
*.jed1.medallia.com
bp1054598.saagie.com
go.medallia.com
dns-vetting1c.map.fastly.net
dns-vetting1c.map.fastly.net
eola-test-survey.medallia.com
medallia.com
g2.shared.global.fastly.net
*.aws-lhr1.medallia.com
*.monkeylearn-1.sea1.medallia.com
*.eng.medallia.com
*.digital-cloud-gov-stg.medallia.com
*.apis.eng.sin1.medallia.com
e2.shared.global.fastly.net
1e291ab3status.snowflake.com
walmart-surveyauth-prod.customapps.medallia.com
*.digital-cloud-gov.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
*.agileresearch.medallia.com
*.fra2.medallia.com
*.sbx.voice.medallia.com
sea1.cdn.survey.medallia.com
g2.shared.global.fastly.net
e2.shared.global.fastly.net
g2.shared.global.fastly.net
api.medallia.com
*.hnd1.medallia.com
*.stella-legacy-devops.medallia.com
sales.medallia.com
dns-vetting1c.map.fastly.net
medallia.com
ix1.gc.medallia.com
medallia.com
*.sbx.ibm.medallia.com
*.stella-legacy-devops.medallia.com
1e291ab3status.snowflake.com
*.aws-pdx1.medallia.com
zenith-cb.ad.medallia.com

Certificate

The complete raw certificate details for cs-sm.medallia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgIRAOCP0F7zKFJ7QYyGkGakQQowDQYJKoZIhvcNAQELBQAw
TTELMAkGA1UEBhMCVVMxEDAOBgNVBAoTB1NTTC5jb20xFDASBgNVBAsTC3d3dy5z
c2wuY29tMRYwFAYDVQQDEw1TU0wuY29tIERWIENBMB4XDTE4MDgwMzAwMDAwMFoX
DTIwMDgwMjIzNTk1OVowQDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
dGVkMRswGQYDVQQDExJjcy1zbS5tZWRhbGxpYS5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDQWseFHviKYGeT13V2UvwzkRmmpnWQt5jWF9zd26v9
wbl3rq6D/5DAO1MiJ4TeKTTxBxRdGtPUZziepgk9T1LAzoH6ugiRA9wxLhyKDAaI
ZnY18sojGBnLFFTsCT1ygVdOVbo7Hls1RqvrwOp4ump1VxfcpjcBvj5YgAJ0yOTT
wSfchBupQz2Wt8CKsck3Q2ubpRBCrX6EQ9jLIX0QOHDRKvJkR8ouK0U0d9DY3DxO
1V+ZLozZuFHs+Sv1ir8L1tnMlqj25pI5cCr7AOod4LIJ6OM5+SB6wljMXbHL2FQu
jN4OAQF5qyKJpaR13gQLMSsp9tSrQLWkAvsut/JR0RU5AgMBAAGjggMFMIIDATAf
BgNVHSMEGDAWgBRGmv38UV58VFNS4pnjszLvkxp/VjAdBgNVHQ4EFgQU765Y/DuM
frZBQwUOCpoZrgIyA7EwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARDMEEwNQYKKwYBBAGC
qTABATAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgG
BmeBDAECATA0BgNVHR8ELTArMCmgJ6AlhiNodHRwOi8vY3JsLnNzbC5jb20vU1NM
Y29tRFZDQV8yLmNybDBgBggrBgEFBQcBAQRUMFIwLwYIKwYBBQUHMAKGI2h0dHA6
Ly9jcnQuc3NsLmNvbS9TU0xjb21EVkNBXzIuY3J0MB8GCCsGAQUFBzABhhNodHRw
Oi8vb2NzcC5zc2wuY29tMB0GA1UdEQQWMBSCEmNzLXNtLm1lZGFsbGlhLmNvbTCC
AX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+w
ctiDAMR7iXqo/csAAAFlAVs8agAABAMARzBFAiEA83LxAMo8AGHvOWvImxJYFel9
TphQ8fHYqJxWrbwB3rECICApfF55WbNS7EHwnGh+U9BLG6afvaSODNlI0U91/t5O
AHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFlAVs8sgAABAMA
RzBFAiA+GSGd1yJ2ZpkrSuGruTpKtY4DA9eReh/V5/IjUOl+JQIhAMRH8I2URygR
RiYGVx1zjI70T3xB3xDE2CQFR/FpsY8mAHUAVYHUwhaQNgFK6gubVzxT8MDkOHhw
JQgXL6OqHQcT0wwAAAFlAVs8hQAABAMARjBEAiBAq5HMJR95EMfCP2Rab0FRdLmI
UkUE0xREkmgiF0ZtGwIgdhG0mkGOgkEef6KI7yTHOrr4sWHjvJsEXbtPZ87s+pYw
DQYJKoZIhvcNAQELBQADggEBAF1KLZiUDdZaoVhqGaUdurjCVR6F8+0bSNQm8m6m
uGmQQir1kqF5cFhxEtjH+4kcsYdgctmbcuvmQm8nnPYaXLiWsJbXrRv/FmJGxvoi
bzr5t2UvIViebYqm8T72REOiuyHQUd1C+tDeJsJYs2OTEv+rhbYRqZ4/a648DjyE
dqHJlwMAn+QatS3+WfmFqKBciSNJaZhUEBWgd8LqimmatYjWJgod4V+LTYxaq5Cu
KopN2Fw56D4Zk2TsZeEIsjm/dZWmbn6U5lifQyEqqMfV2z+DfGjaBZx33rDDg71q
Qln4EkBxIKwYLZ9RhH1teezfFz2+bX90GoVCmw5Ic3CzH7k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FrHhR74imBnk9d1dlL8
M5EZpqZ1kLeY1hfc3dur/cG5d66ug/+QwDtTIieE3ik08QcUXRrT1Gc4nqYJPU9S
wM6B+roIkQPcMS4cigwGiGZ2NfLKIxgZyxRU7Ak9coFXTlW6Ox5bNUar68DqeLpq
dVcX3KY3Ab4+WIACdMjk08En3IQbqUM9lrfAirHJN0Nrm6UQQq1+hEPYyyF9EDhw
0SryZEfKLitFNHfQ2Nw8TtVfmS6M2bhR7Pkr9Yq/C9bZzJao9uaSOXAq+wDqHeCy
CejjOfkgesJYzF2xy9hULozeDgEBeasiiaWkdd4ECzErKfbUq0C1pAL7LrfyUdEV
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298493795770490075696724408607527158026
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ssl.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL.com DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-sm.medallia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26302332411173653499125071042421045745071890583466990240316864297712191426918061235999821406388323605729607741638980395276119703352191212191511687410812480857761777437397087340353264014265743637313469104345745871269129124596693242587064705080687275436311647370618883103877305520101463192580803717831061731994394444783559382493931898428751109338215831681238181195966391480785162455165349815340858626578685694047603599709182631147412093602766290806788656378125301697514897000697992703926797250239902388001480157015301566936317620287756842272195304455389164769031514681404082176656843832494533636955428820914135066809657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 469afdfc515e7c545352e299e3b332ef931a7f56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efae58fc3b8c7eb64143050e0a9a19ae023203b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ssl.com/SSLcomDVCA_2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.ssl.com/SSLcomDVCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-sm.medallia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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