secure-usea1-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:e4:88:ae:42:ed:7b:61:e5:d7:52:0a:79:36:58:55 was issued on by DigiCert Inc.

With 213 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e4:88:ae:42:ed:7b:61:e5:d7:52:0a:79:36:58:55
Serial Number (int): 6503527881005087024523385633049565269
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a1:24:22:07:0b:2a:3d:86:5c:0d:47:b7:24:74:e2:d0:44:48:db:f8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 7c:15:a9:a0:47:08:ff:17:a6:d6:60:f1:42:38:9f:9a:15:50:75:b2
Fingerprint (sha256): 04:7a:ec:cb:33:06:56:35:4b:29:db:04:3c:d3:df:f0:3b:89:bd:b2:e3:ac:82:d0:0e:9e:bb:9f:d4:c0:52:0d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure-usea1-1.tessituranetwork.com

213

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-usea1-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tn.services
*.tnhs.cloud
tnew.gardnermuseum.org
my.torontoconsort.org
my.tafelmusik.org
secure.rutheckerdhall.com
ticketing.rockhall.com
tickets.peopleslight.org
shop.burnsfilmcenter.org
my.high.org
tickets.frostscience.org
engage.clevelandart.org
my.artsphilly.org
secure-usea1-1.tessituranetwork.com
my.wexarts.org
dpactickets.nd.edu
my.historicnewengland.org
my.papermill.org
shop.ctsciencecenter.org
ticketing.fwphil.org
naramptest.americanancestors.org
my.smithsonianassociates.org
secure.thecenterpresents.org
tickets.newvictory.org
tickets.callawaygardens.com
my.ringling.org
my.americanancestors.org
tickets.wilmatheater.org
secure.vafest.org
tickets.dukeon42.org
my.bigarts.org
cart.bostonballet.org
tickets.georgiaaquarium.org
my.tdf.org
tickets.11thhourtheatrecompany.org
reservations.bam.org
boxoffice.porttix.com
cart.2st.com
my.nycopera.com
ticketing.cincyplay.com
my-mon.nature.ca
tickets.annenbergcenter.org
cart.handelandhaydn.org
ramp.mysticaquarium.org
tickets.olneytheatre.org
myptc.philadelphiatheatrecompany.org
tickets.paintedbride.org
tickets.mediatheatre.org
tickets.brtstage.org
supporter.fonz.org
my.avaopera.org
my.adventuretheatre-mtc.org
my.operacarolina.org
tickets.su.edu
my.filmforum.org
harrypotterbooking.ticketking.com
my.shubert.com
my.museumaacm.org
cart.sarasotaballet.org
tickets.mirvish.com
visit.ncartmuseum.org
cart.scchildrenstheatre.org
checkout.mountvernon.org
cart.lighthousetheatre.com
secure.virginiahistory.org
secure.mayoarts.org
mirvish.ticketking.com
my.cbusarts.com
cart.architecture.org
my.nationalvmm.org
secure.fordhouse.org
secure.centerstage.org
secure.balletmet.org
tickets.millbrookplayhouse.org
my.daytonlive.org
tickets.westportplayhouse.org
tickets.irishartscenter.org
secure.orlandoballet.org
my.naplesplayers.org
secure.nbpac.org
visit.thejamesmuseum.org
tickets.thevillages.com
naramptest.frostscience.org
naramptest.high.org
naramptest.woodruffcenter.org
naramptest.georgiaaquarium.org
my.ballet.ca
my.riversidetheatre.com
give.ringling.org
tickets.ithaca.edu
secure.virginiafilmfestival.org
tickets.hudsonvalley.org
cart.midlandcenter.org
my.louisvilleballet.org
naramptest.tdf.org
my.rpo.org
hoptix.dartmouth.edu
tickets.flynncenter.org
tickets.nascarhall.com
secure.cooperhewitt.org
mon.nature.ca
cart.titusvilleplayhouse.com
secure.georgestreetplayhouse.org
tickets.fergusoncenter.org
my.nature.ca
my.cballet.org
ticket.americanrepertorytheater.org
patrons.imaginationstage.org
boxoffice.fairfieldtheatre.org
shop.joyce.org
purchase.flatrockplayhouse.org
my.mocanyc.org
my.fords.org
purchase.filmlinc.org
tickets.shakespearetheatre.org
tickets.thewhiting.com
tickets.arenastage.org
tickets.horizontheatre.com
cart.michiganopera.org
my.alliancetheatre.org
tickets.grandtheatre.com
tickets.carolinaperformingarts.org
ticketing.vaopera.org
tickets.shawfest.com
ticketing.hartfordstage.org
ysd-tickets.yale.edu
ticketsales.puppet.org
tickets.youngcentre.ca
ticketing.spoletousa.org
tickets.sarasotaopera.org
tix.operaphila.org
tickets.miamicityballet.org
ticketing.marylandhall.org
tickets.auroratheatre.com
t-secure-usea1-1.tessituranetwork.com
est1.tessituranetwork.com
est2.tessituranetwork.com
tickets.kaufmanmusiccenter.org
commerce.armoryonpark.org
purchase.metmuseum.org
tickets.ums.org
tickets.atlantaopera.org
tickets.rockportmusic.org
sales.thepowerplant.org
ticketing.jazz.org
charlottesville.theparamount.net
tickets.va-rep.org
tickets.celebrityseries.org
tickets.irtlive.com
my.harbourfrontcentre.com
tickets.themahaffey.com
tickets.artisnaples.org
tickets.massmoca.org
tickets.a2sf.org
shop.fscjartistseries.org
tickets.asolorep.org
my.osc.org
tickets.kwsymphony.ca
my.tso.ca
cart.gettysburgfoundation.org
naramptest.fords.org
tickets.vastage.org
my.jacobspillow.org
the.floridaorchestra.org
tickets.ogunquitplayhouse.org
my.icaboston.org
tickets.appellcenter.org
tickets.mccarter.org
experience.museumofcontemporaryart.ca
my.firstpersonarts.org
my.airzoo.org
tickets.masseyhallroythomsonhall.com
my.intrepidmuseum.org
tickets.playmakersrep.org
boxoffice.kalamazoosymphony.com
my.jaxsymphony.org
cart.woodruffcenter.org
tickets.millerauditorium.com
my.kazoocivic.com
tnew.mfa.org
secure.hillwoodmuseum.org
my.pem.org
naramptest.lsc.org
cart.roundhousetheatre.org
cabaret-tickets.yale.edu
my.coc.ca
tsoundcheck.tso.ca
tickets.AtlantaBallet.com
summercab-tickets.yale.edu
yalerep-tickets.yale.edu
music-tickets.yale.edu
tickets.virginiasymphony.org
buy.sarasotaorchestra.org
tickets.nyu.edu
events.folger.edu
mycart.chambermusicsociety.org
securesite.baychamberconcerts.org
my.cincinnatiopera.org
tickets.lsc.org
my.actorstheatre.org
tickets.thegrandwilmington.org
order.sciencenorth.ca
my.orlandophil.org
tickets.floridastudiotheatre.org
ticketing.agakhanmuseum.org
my.ticketcenterstage.com
ticketing.blo.org
tickets.smtd.umich.edu
tickets.artsboxoffice.virginia.edu
tickets.arts.emory.edu
tickets.modlin.richmond.edu
secure.masongross.rutgers.edu
tickets.fishercenter.bard.edu

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-usea1-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+DmeacGBvsOMn/8vLTZ
miqPYLSwa+i/124k2VIUsqzmQr0JtkI9y+EQwERXItlTMM3cc5ow2tQ/4xmgUogB
tdtnxBxW1xebXrOq6j6mbxsEkl2wvNMyah2d5ET+5KxeBb+PhYB7+8O6ADn1bL17
KVrjt1vN2WUBF5Nzlgg0Jdr6kAuOFzqSHFlCzieRvpxEwlUvPNz/j7mgMQXPlS5/
KEkMTxREpZTzDzySUY3aPyGKpYEZvDV0cXrP/XoJjdSMtwZkssxTGS8G+q10GMgN
8x+LBnZCCvZevm0zRTz55zmHwA9Ek3XlcOcW5YPCcYa4Ppvt0etH6t3m++95Suor
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6503527881005087024523385633049565269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-usea1-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25232325156494685219972993196025710304958784084834474036201439210634850483990175380682613595950301728235059629506008049534591135445487814655437348207833546984653173533990609038478888820835827236634990733048408530760795493918595890030545190672935501623442317519780636793974838097310388392729151823089139713274282002890727370274640088153844932697503674251832870759058961454651143389580231660755495250407089852391164141407014355253667322642385751245270721449927458671627321262951102368981652267998690629568463170460590496321717329847858080028052012862156732312238401791806969543504554631265163113149950137152193566485379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a12422070b2a3d865c0d47b72474e2d04448dbf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.gardnermuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.torontoconsort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tafelmusik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rutheckerdhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.rockhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peopleslight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.burnsfilmcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.frostscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.clevelandart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artsphilly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-usea1-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wexarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpactickets.nd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.historicnewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.papermill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ctsciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.fwphil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smithsonianassociates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thecenterpresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.newvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.callawaygardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ringling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wilmatheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vafest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dukeon42.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bigarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.bostonballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tdf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.11thhourtheatrecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.porttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.2st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nycopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.cincyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mon.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.annenbergcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.handelandhaydn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramp.mysticaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.olneytheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myptc.philadelphiatheatrecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.paintedbride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mediatheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.brtstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.fonz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.avaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.adventuretheatre-mtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacarolina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.filmforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotterbooking.ticketking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shubert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.museumaacm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sarasotaballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mirvish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.ncartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.scchildrenstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.mountvernon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lighthousetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginiahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mayoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirvish.ticketking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cbusarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.architecture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nationalvmm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fordhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centerstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.balletmet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.millbrookplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.daytonlive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.westportplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.irishartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.orlandoballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.naplesplayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.nbpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.thejamesmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thevillages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.frostscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ballet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.riversidetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ringling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ithaca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginiafilmfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hudsonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.midlandcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.louisvilleballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.tdf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.rpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoptix.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.flynncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nascarhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cooperhewitt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.titusvilleplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.georgestreetplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fergusoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.americanrepertorytheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrons.imaginationstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.fairfieldtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.joyce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.flatrockplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mocanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.fords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.filmlinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shakespearetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewhiting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.arenastage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.horizontheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.michiganopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.grandtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carolinaperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.vaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shawfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.hartfordstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysd-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsales.puppet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.youngcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.spoletousa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sarasotaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.operaphila.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miamicityballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.marylandhall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.auroratheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-usea1-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'est1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'est2.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kaufmanmusiccenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.armoryonpark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.metmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ums.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.atlantaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.rockportmusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.thepowerplant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.jazz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottesville.theparamount.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.va-rep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.celebrityseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.irtlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.harbourfrontcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.themahaffey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artisnaples.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.massmoca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.a2sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fscjartistseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.asolorep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.osc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kwsymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.gettysburgfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.fords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.vastage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jacobspillow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the.floridaorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ogunquitplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.icaboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.appellcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mccarter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.museumofcontemporaryart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.firstpersonarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.masseyhallroythomsonhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.intrepidmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.playmakersrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.kalamazoosymphony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jaxsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.millerauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.kazoocivic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.mfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hillwoodmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.lsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.roundhousetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabaret-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.coc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsoundcheck.tso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.AtlantaBallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercab-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalerep-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.virginiasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.sarasotaorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycart.chambermusicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.baychamberconcerts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cincinnatiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.actorstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegrandwilmington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.sciencenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orlandophil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.floridastudiotheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.agakhanmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ticketcenterstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.blo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.smtd.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsboxoffice.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.arts.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.modlin.richmond.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.masongross.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fishercenter.bard.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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