san-11-s51.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:1a:f1:34:9e:6f:99:c0:2a:2a:2d:97:1d:d5:43:df was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:1a:f1:34:9e:6f:99:c0:2a:2a:2d:97:1d:d5:43:df
Serial Number (int): 13432171905783543426332366589746562015
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 68:f5:05:21:03:39:4c:20:9b:0f:b3:95:70:69:91:a8:ec:42:15:e7
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): f9:c3:59:d5:78:89:92:7e:a2:c9:ed:79:c5:e3:37:cc:1f:03:9c:b2
Fingerprint (sha256): 06:d5:8e:c9:76:f5:aa:8e:25:28:6d:ea:a9:fc:a4:e9:02:2f:9f:06:0d:b9:91:45:c2:f8:8f:51:dc:f1:27:a3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-11-s51.tlsprovisioning.exacttarget.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-11-s51.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-11-s51.tlsprovisioning.exacttarget.com
image.uk.asahibeer.eu
image.email.westwoodenergy.com
image.cz.asahibeer.eu
image.emailfundacionronald.org
image.explore.realmadridworld.com
image.it.asahibeer.eu
image.jp.genmab.com
image.marketing.worldanimalprotection.org
image.mc.lampuga.de
image.clientisanpaolo.it
image.communication-swisslifebanque.fr
image.email.ledvance.com
image.mail.wearegroup.com
image.contigo.contraelcancer.es
image.email.weareulity.com
image.contact.tcs.ch
image.e.zonnebloem.nl
image.marketing.worldanimalprotection.or.ke
image.marketing.worldanimalprotection.org.br
image.marketing.worldanimalprotection.org.in
image.hi.cyrebro.io
image.info.bara.co.il
image.info.barapro.co.il
image.info.bosch-digital.com
image.email.childrenwithcancer.org.uk
image.email.leaderfit-formation.com
image.info.cabinetmonot.fr
image.marketing.worldanimalprotection.cr
image.act-info.altana.com
image.info.ackermans.co.za
image.email.bydauto.at
image.email.vgz.nl
image.c.npvzorg.nl
image.expertise.equans.be
image.boostworks.co.uk
image.mail.signaturegolf.com
image.email.toogoodtogo.com
image.mc.collectorsweekly.com
image.updates.qahighereducation.com
image.patient.crpce.com
image.b2b.idealo.com
image.biz.gov.il
image.mail.myautogrill.it
image.mail.myeva.com
image.marketing.yessayan.com
image.clienti.engie.ro
image.email.abgprivatebanking.se
image.email.barc.net
image.info.plusmore.co.za
image.mail.wigomobility.com
image.mc.mainova.de
image.emails.embecta.com
image.bulten.columbia.com.tr
image.actions.mediafin.be
image.mail.mediafin.be
image.email.chemorbis.com
image.emails.neovel.io
image.email.minuc.se
image.guests.onefinestay.com
image.mail.omatieto.fi
image.marketingbiautogroup.com
image.mc.valuemystuff.com
image.mejl.plansverige.org
image.email.businesssecurecloud.co.uk
image.comunicaciones.laligabares.com
image.marketing.svantek.com
image.communication.nirio.fr
image.get.overbergagri.co.za
image.email.bookouture.com
image.email.islamicaid.com
image.email.limesupply.com
image.polpharmagroup.info
image.lionsrugby.com
image.info.oca.com.uy
image.fundourselves.net
image.mail.fizz.hu
image.mail.myblast.ch
image.welendus.net
image.marketing.epilate.it
image.centreone.pfizer.com
image.crm.infiniti-me.com
image.info.aiguesdebarcelona.cat
image.e.madinetmasr.com
image.info.bosch-mobility.tech
image.services.mysofie.fr
image.taagidim.justice.gov.il

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-11-s51.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg2zuspG1g6dFcv9HlwD
OyTsdJMTfvp6Aa2pG2uZJ1ZC2q5pjxGAargdsjSyxzLMyDATxADLMpco9DHzEo73
kNpWhNhLZxco5B0yMY9YvG2jnNa4oBULqIrx/ZSLfWU4TLyiIWPUIrIxPjm8B7JI
9b37BiFRyijhPfFwkxdxC+0xKTya9c48pRLdSsd88WM+C1ZLQbZMyBtcqtv5rwyx
4yXu579bbxD8jVFS5vcFqG7prp6NJOR5pUmcH7zO36CblgxG4vAKpjJIemnCvwDF
Mhp9kKJ9wk2G67VnzbqCGqh9TvZxgN2L9c0Mex8dneFkLr1tCf8NRkOyrshldxHA
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13432171905783543426332366589746562015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-11-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26011847565030302735925481321961970350059833766482551476849264525283635919312888089520643495069759504492215883708227043753927381430047140635161626486435811355059484075945732721905288012804784717853679139967975385778133971857939615481404336559590121326939690284908197578834388916552489272393584260010937410929088255548368420642952140757365387047550490405390286330763452564928622392879651885932278108977897225806692397385896910143058905074754583276858007349859866169003481690713210315077760331878087550142011293602981981404953851693078696518836956712080089291717155671324042484952195664103293042601875996410143210324211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68f5052103394c209b0fb395706991a8ec4215e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2470 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-11-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uk.asahibeer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.westwoodenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cz.asahibeer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailfundacionronald.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.explore.realmadridworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.it.asahibeer.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jp.genmab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.worldanimalprotection.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.lampuga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientisanpaolo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication-swisslifebanque.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ledvance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.wearegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contigo.contraelcancer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.weareulity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.tcs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.zonnebloem.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.worldanimalprotection.or.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.worldanimalprotection.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.worldanimalprotection.org.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hi.cyrebro.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bara.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.barapro.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bosch-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.childrenwithcancer.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.leaderfit-formation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cabinetmonot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.worldanimalprotection.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.act-info.altana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.ackermans.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bydauto.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vgz.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.npvzorg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.expertise.equans.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.boostworks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.signaturegolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.toogoodtogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.collectorsweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.qahighereducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.patient.crpce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.b2b.idealo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.biz.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.myautogrill.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.myeva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.yessayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clienti.engie.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.abgprivatebanking.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.barc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.plusmore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.wigomobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.mainova.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.embecta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bulten.columbia.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.actions.mediafin.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mediafin.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chemorbis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.neovel.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.minuc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.guests.onefinestay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.omatieto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingbiautogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.valuemystuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mejl.plansverige.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.businesssecurecloud.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.laligabares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.svantek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.nirio.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.get.overbergagri.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bookouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.islamicaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.limesupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.polpharmagroup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lionsrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.oca.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fundourselves.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fizz.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.myblast.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.welendus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.epilate.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.centreone.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.infiniti-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aiguesdebarcelona.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.madinetmasr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bosch-mobility.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.services.mysofie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.taagidim.justice.gov.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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