san-17-s13.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:5f:18:83:b4:6f:4f:4f:24:77:85:8e:c0:62:57:18 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:5f:18:83:b4:6f:4f:4f:24:77:85:8e:c0:62:57:18
Serial Number (int): 1822993409907368567024584189477541656
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 55:1d:cb:cf:8f:ba:02:89:e6:5f:fc:18:40:2f:34:47:09:66:53:31
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 44:3c:f6:b0:4c:cb:e0:b8:01:ab:17:bf:60:17:e9:2d:5e:cf:9b:e8
Fingerprint (sha256): 05:69:7b:b4:70:99:70:40:e5:72:54:14:00:cb:d0:5f:47:c2:72:4e:7c:aa:ea:70:69:96:b2:72:0a:e4:8b:bc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-17-s13.tlsprovisioning.exacttarget.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-17-s13.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-17-s13.tlsprovisioning.exacttarget.com
image.email.imsmetals.com
image.email.ars-servicio.com
image.email.familyreach.org
image.mkt.quasar-connect.com
image.ml.imperialhotel.co.jp
image.apoyo.pypmexico.com
image.contacto.farmacialabomba.com
image.contacto.fischelenlinea.com
image.email.efa.org
image.email.lntriallawyers.com
image.mail.salfarent.cl
image.my.brother.ca
image.conexusfinancial.com.au
image.email.castellhealth.com
image.marketing.ghostcontrols.com
image.marketing.libertineparfumerie.com.au
image.e.excellus.com
image.email.bsxvapor.com
image.email.glas.com
image.financeiro.linx.com.br
image.messages.privateclientselect.com
image.chipadvisor.heb.ca
image.comunicaciones.lahaus.com
image.e.communio.org
image.mi.contpaqi.com
image.motos-hero.com
image.grad.gradright.me
image.marketing.coherentcs.com
image.marketing.heimanfire.com
image.news.na-email.sanofi
image.usa.na-email.sanofi
image.comunica.praso.com.br
image.hps.harmonytx.org
image.mail.puntoblanco.co
image.mkt.viainvest.com.br
image.email.guitarcenter.com
image.email.musicarts.com
image.mc.pibetaphi.org
image.email.showpass.com
image.feinberg.dar.northwestern.edu
image.m.harbourfrontwealth.com
image.marketing.segurodeviajemundial.com
image.marketing.seguroparaviaje.com
image.marketing.traveler-assistance.com
image.yticon.online
image.news.unitransco.com
image.e.sloaneautos.com
image.grupoayoshii.online
image.mailna.novavax.com
image.marketing.cisagro.cl
image.marketing.pillartopost.com
image.marketing.seguri.com
image.m.uwhealth.org
image.capital.connect.jpmorgan.com
image.mkt.grupoequatorialenergia.com.br
image.chip.heb.ca
image.e.eljannah.com.au
image.e-youinc.com.br
image.mail.babyfresh.co
image.mail.conversica.com
image.send.plusgrade.com
image.mkt.playplus.com
image.marketing.sunstateequip.com
image.mkt.cogecom.com.br
image.mkt.buv.edu.vn
image.mail.gef.co
image.marketing.grupogovan.com
image.mkt.imaginedone.com.br
image.news.cencosudmedia.com.co
image.ma.yohjiyamamoto.co.jp
image.cloud.alleata.com.ar
image.mail.newravenna.com
image.marketing.vortexoptics.com
image.email.bbbattorneys.com
image.engage.bu.edu
image.m.kefotos.mx
image.mkt.mundorecord.com.br
image.paravoce.r7.com
image.mail.crmlanding.in
image.ppgmail.propharmagroup.com
image.comunicacion-fmf.mx
image.connect.peopleready.com
image.e.esi-mailer2.com
image.e.esi-mailer3.com
image.buzz.vairesort.com
image.email.montenido.com
image.mailerchamps.com
image.mkt.datarisk.io
image.anzcorpay.com
image.communication.kent.co.in
image.email.kiausacrm.com
image.inhoc.sigmachi.org
image.kia-italia.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com

Certificate

The complete raw certificate details for san-17-s13.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zrJ2t30I0823IVepcDx
lTZp/YfZ5Gdyuk5UpIo9KnB5pzfu9ZrqZLUilLnjzMHH4KaAzFmkPzmSc/hVCySB
Jl45F8yw2zDKZs/jwWJa1dJPpC1IdSTFNKzX+6NwLxx6a5336WAAfX9Vo+2GB/mU
1cFOaFkqkD0R1jfZzTJ3jW8CpNbpVcwJV6AaOhmmLybMoDR9GWlPXvFzGHJyPU81
CK/kov+ZLgq2UR53H4cyrrO+XSwqGB0EYccyZyT7+jXKTlh7QeNBOJptJQFEQDV5
wENJvyfjuZLbV1JSizSozExY2dLh1vN1XvxTBOtIR4vvUFF9/iX8dUxOmaBhYZXw
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1822993409907368567024584189477541656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-17-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30704897794538769077598853788972084068218413322827730043145886194707526034141448528603136335673318206904016475828172523676731211342200156121084389892026067597600916327897166701843347386448087293947078926831952606387321622572525406029477217229536542748454271733069900719296534347720037929847885502662566659656284677362161647689367871001011222827950515956713680672792372278985870885857640294292212228138949244696498107425514389423074276729675895367433155228437315099757701367071406372410748190428966087267937047117869228844008086995981093566528514528569696715962378887460215170826479077989914671515270226967372462682277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							551dcbcf8fba0289e65ffc18402f344709665331
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2667 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-17-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.imsmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ars-servicio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.familyreach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.quasar-connect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ml.imperialhotel.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.apoyo.pypmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.farmacialabomba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.fischelenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.efa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lntriallawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.salfarent.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.brother.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conexusfinancial.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.castellhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.ghostcontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.libertineparfumerie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.excellus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bsxvapor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.glas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.financeiro.linx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messages.privateclientselect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.chipadvisor.heb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.lahaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.communio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mi.contpaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.motos-hero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.grad.gradright.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.coherentcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.heimanfire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.na-email.sanofi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.usa.na-email.sanofi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunica.praso.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hps.harmonytx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.puntoblanco.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.viainvest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.guitarcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.musicarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.pibetaphi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.showpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.feinberg.dar.northwestern.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.harbourfrontwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.segurodeviajemundial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.seguroparaviaje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.traveler-assistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.yticon.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.unitransco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.sloaneautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.grupoayoshii.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailna.novavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.cisagro.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.pillartopost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.seguri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.uwhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.capital.connect.jpmorgan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.grupoequatorialenergia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.chip.heb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.eljannah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-youinc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.babyfresh.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.conversica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.send.plusgrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.playplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.sunstateequip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.cogecom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.buv.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.gef.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.grupogovan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.imaginedone.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cencosudmedia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.yohjiyamamoto.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.alleata.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.newravenna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.vortexoptics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bbbattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.bu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.kefotos.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.mundorecord.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.paravoce.r7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.crmlanding.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ppgmail.propharmagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion-fmf.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.peopleready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.esi-mailer2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.esi-mailer3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.buzz.vairesort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.montenido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailerchamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.datarisk.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.anzcorpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.kent.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kiausacrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.inhoc.sigmachi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kia-italia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018fba933e0e000004030047304502203ad2c8b375faad8c001f84071a17b977d3f3c4a7c6d44989690d1f3d347fa620022100bcae9dc98546ad8d6d40e082da582a76de3cc000fb8e30a27b973a827717f66a0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018fba933e520000040300483046022100dd132201ef731e24d917dbe724304ae11d2f73a13edfdc0c621db38167587b86022100dbc4ae5cefa98c0697de2f09d4d86f859b2f52fd92d70b475dfff6dc512aac8e007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018fba933e620000040300463044022041213cf391256cfaba37aed4a15234fe160dfb44da585045fed61d122aa10468022054ad514e7419be94f02001d1f2ea625ed5fc5b8c6662e52a0b503a00d7b36f0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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