secure-uswe2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:3f:a6:b5:cd:76:36:c8:61:c7:b7:64:0b:55:06:1e was issued on by DigiCert Inc.

With 103 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3f:a6:b5:cd:76:36:c8:61:c7:b7:64:0b:55:06:1e
Serial Number (int): 10964319952245981347238314242458584606
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:e0:29:7a:c4:10:82:68:e0:82:8d:df:ce:34:eb:79:25:a4:ae:03
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2f:15:fb:2a:80:4a:8f:bd:af:68:e3:a2:d8:ce:1b:7e:62:b6:43:34
Fingerprint (sha256): 06:5f:7e:fe:24:f2:da:9b:1b:59:90:01:56:14:cc:4d:43:78:29:e1:13:90:a7:4a:91:8d:cd:88:0a:19:07:5c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure-uswe2-1.tessituranetwork.com

103

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-uswe2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-uswe2-1.tessituranetwork.com
*.tn.services
tickets.artistsrep.org
tickets.berkeleyrep.org
purchase.broadwayrose.org
secure.calperformances.org
my.californiasciencecenter.org
my.artcenter.org
store.ensembletheatre.com
tickets.galloarts.org
ticketing.granadasb.org
purchase.groundlings.com
tickets.haughpac.com
purchase.lagunaplayhouse.com
wowfestival.lajollaplayhouse.org
securesite.lajollaplayhouse.org
checkout.lobero.com
my.lfjcc.org
tickets.orsymphony.org
order.pnb.org
my.pasadenaplayhouse.org
securesite.pcs.org
tickets.philharmonicsociety.org
securesite.sdrep.org
purchasing.sandiegosymphony.org
secure.seattleopera.org
cart.seattlesymphony.org
www.stanfordjazztickets.org
www.stanfordlivetickets.org
sto.stanfordtickets.org
my.theatreworks.org
tickets.mondaviarts.org
tickets.artsandlectures.ucsb.edu
tickets.thewallis.org
tickets.lutherburbankcenter.org
purchase.worldofspeed.org
tickets.ybca.org
secure-tickets.berkeley.edu
secure.honolulumuseum.org
tickets.hawaiiopera.org
my.californiahistoricalsociety.org
store.mopop.org
ticketing.thetech.org
tickets.lamasterchorale.org
my.afi.com
cart.pacificchorale.org
tickets.vancouveropera.ca
cart.lamiradatheatre.com
tickets.thesmithcenter.com
my.californiamusicaltheatre.com
transaction.theconrad.org
my.montalvoarts.org
natest.seattleopera.org
naramptest.californiasciencecenter.org
my.broadwaysacramento.com
tickets.cerritoscenter.com
secure.thesymphony.org
order.acttheatre.org
naramptest.artsandlectures.ucsb.edu
cart.sunsetcenter.org
tickets.calacademy.org
secure.vancouversymphony.ca
secure.foxtheaterspokane.org
secure.act-sf.org
tickets.theshedd.org
secure.seattleartmuseum.org
checkout.colburnschool.edu
tickets.balletaz.org
tickets.azopera.org
tickets.azscience.org
tickets.phoenixtheatre.com
tickets.phoenixsymphony.org
tickets.scottsdalearts.org
my.scottsdalemuseumwest.org
tickets.theaterworks.org
shop.youraga.ca
support.arvadacenter.org
tickets.cupresents.org
ticketing.bravovail.org
tickets.coloradoballet.org
tickets.coloradosymphony.org
shop.artscommons.ca
tickets.edmontonopera.com
tickets.intermountainarts.org
tickets.ticketssantafe.org
subscription.magicspace.net
my.operacolorado.org
secure.performancesantafe.org
secure.santafechambermusic.com
boxoffice.santafesymphony.org
arttix.artsaltlake.org
my.theatrecalgary.com
cart.thanksgivingpoint.org
my.usuo.org
tickets.boisephil.org
my.winspearcentre.com
shop.calgaryopera.com
boxoffice.balletwest.org
tickets.uccspresents.org
naramptest.thanksgivingpoint.org
cart.tixonthesquare.ca
tickets.haletheater.org
tickets.lensic.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-uswe2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK97biV+zqxlQ30g4AA8
1Np50ULQsATeJY4JtYy3/0azK1xCQ0LlhvzwGDf3paD2Ii6UHpRABQ335tb5whwj
4OyoiAPp0ad4rXXO3T2VyVjkDStMpcbOffVDn/gec33vyE6dLCL7CUv72k33HNV6
5zLhIzLQQnULULvNF8J3SuKV8NVBTmfkgZpzbl/yPTmEjMTtylFFkYZJ1O6VnPGB
kjpb9aAYdPmzFnBGVp8Jp6J1WVpBk9WZHRZe2mk3pwpE+kmwVPpofF8eC7r0RGxf
ttfx1CCHUkOOJsf4VjCeHZbYOTQ1YW6ioo+0wC1DZC0SSFBIXLgIt1ZNGKt6GoUu
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10964319952245981347238314242458584606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25839147686117296221562727874168295307572581195765135288705071795728454062178289621121621974718393049232628390247105520780961619137840872957050214501279906586529986442217352952909768474481496758400820193784086715712845993985954667539892424301574509811170416559178415929303058162780888963891042265286878313407578691324591745782742761984171352653349575528434198279619295964432905704778786033992200241293345004774653824363935494405447119234232124936789086202432248657982882029616387707374955328679855063387969539050011992569931868218834382126220138189392533831377042277068138334663496578216947790003054284037852978556451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2e0297ac4108268e0828ddfce34eb7925a4ae03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2665 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artistsrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.berkeleyrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.broadwayrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ensembletheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.galloarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.granadasb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.groundlings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haughpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.lagunaplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfestival.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lobero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lfjcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.orsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pasadenaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.pcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.philharmonicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.sdrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.sandiegosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.seattlesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordjazztickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordlivetickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto.stanfordtickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mondaviarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewallis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lutherburbankcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.worldofspeed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ybca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-tickets.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.honolulumuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hawaiiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiahistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mopop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.thetech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lamasterchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.pacificchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.vancouveropera.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lamiradatheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesmithcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiamusicaltheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction.theconrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.montalvoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natest.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.broadwaysacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cerritoscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.acttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sunsetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.calacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouversymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foxtheaterspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.act-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theshedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.colburnschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.scottsdalearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scottsdalemuseumwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theaterworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.youraga.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.arvadacenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cupresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.bravovail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradoballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.artscommons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.edmontonopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.intermountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ticketssantafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.magicspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performancesantafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.santafechambermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.santafesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arttix.artsaltlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatrecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usuo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.boisephil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.winspearcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calgaryopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.uccspresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tixonthesquare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haletheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lensic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
							00ed007400ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016cbb4d7876000004030045304302202c28019f77fa9981f7644a962900d5cd4cdf0f3241c021cffe548e1b6f606c21021f2e27ea4b20974ee900a0dbc4b60015154ba5087428d783375d042b613a89840075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cbb4d78ac000004030046304402201e49b4f7ba337290a608c93e7e9f41c96aa132905daaeb5dae410614f70cc4880220479c27e54c5529a2c2eeb68d3d804824c41979fb4f352fac97f568572f25b962
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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