san-17-s51.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:00:71:50:38:ca:30:4a:6e:36:cd:4c:6b:23:ea:c5 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:00:71:50:38:ca:30:4a:6e:36:cd:4c:6b:23:ea:c5
Serial Number (int): 10636122234393132375284848865522739909
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:b5:2c:01:e3:94:a4:6f:20:c1:20:8c:98:16:36:23:cf:06:ae:54
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): f1:12:0b:42:62:c5:5a:e1:9f:d3:15:56:59:58:76:ac:d0:52:35:1d
Fingerprint (sha256): 07:ca:b4:22:05:8f:00:da:83:12:53:ac:03:c4:35:74:75:60:7e:9a:d1:77:27:9d:c7:14:ec:60:ee:a9:88:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-17-s51.tlsprovisioning.exacttarget.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-17-s51.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-17-s51.tlsprovisioning.exacttarget.com
image.university.hull.ac.uk
image.mail.onmo.app
image.cafekoko.uk
image.kokoculture.com
image.kokoelectronic.co.uk
image.mktcloud.alaqtar.com
image.news.de.ehub-healthcare.com
image.thehouseofkoko.co.uk
image.e.travel-email.com
image.email.patmos.fi
image.marketing.victorinox.com
image.mail.ehcb.ch
image.marketing.rilastil.it
image.email.validatagroup.com
image.news.olympus.co.uk
image.onecrm.airfranceklm-acc.com
image.airfranceklm.flyingblue.com
image.communications.kpcgroup.fr
image.content.alfasigma.health
image.email.hrewards.com
image.email.mkt.meo.pt
image.mail.racetools.fr
image.m.sinch.com
image.mail.solar-assistance.be
image.update.skanska.co.uk
image.mail.unicef.it
image.mail.educo.org
image.newsletter-mercedes.com
image.info.adu.ac.ae
image.mc.segurosnogal.es
image.comms.intofilm.org
image.newsletter-veho.com
image.send.schuco.co.uk
image.info.lc.ac.ae
image.comms.howdenre.com
image.info.mondobydefunc.com
image.mc.apart.pl
image.email.eplan.com
image.info.druni.es
image.mail.accademiartisti.it
image.engage.idealteam.group
image.by.immowelt.de
image.de.lofino.de
image.mkt.nacionalgest.pt
image.email.robmoore.com
image.np.drmax.it
image.email.imballaggi-2000.com
image.info.lusitania.pt
image.marketing.beyond-hospitality.com
image.admin.ukdebtexpert.co.uk
image.communication.cbainfo.fr
image.email.iso.fr
image.info.f95.de
image.info.laenderbahn.com
image.mc.vtdseguros.elcorteingles.es
image.cm.andalbrok.es
image.emails.bahiaprinciperesidencesandgolf.com
image.m.bloomingskin.pt
image.medical-rights.org.il
image.posti.ekosahko.fi
image.comms.cureleukaemia.co.uk
image.mc.skilling.com
image.email.ageas.pt
image.email.segurodirecto.pt
image.marketing.rc4.pt
image.saude.medis.pt
image.info.fifamuseum.org
image.email.millenniumhotels.com
image.channel.mannheim-business-school.com
image.email.bridgement.co
image.email.skan.com
image.mail.agiliosoftware.com
image.go.clivet.com
image.e.sigmaaldrich.com
image.usa.email.chattem.com
image.email.akrikhin.info
image.email.polpharmagroup.info
image.emails.payretailers.com
image.team.generali.bg
image.email.cantabrialabs.es
image.comunicaciones.cyclica.com
image.mail.agiliosoftware.nl
image.mail.heitec.de
image.contact.cnosf.org
image.dach.service-recordati.com
image.ism.mkcld.seg-social.es
image.newsletter.akdb.de
image.persoenlich.haftpflichtkasse.de
image.tgss.mkcld.seg-social.es
image.email.bucklandgroup.co.uk
image.marketing.rentik.com
image.service.srovnejto.cz
image.service.superpoistenie.sk
image.inss.mkcld.seg-social.es

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-17-s51.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5he5qrS81RA50SjTJr2Z
bfe+jycXaoonqDRmBC7G29x0EFBc4L5ZMxyhblcJ5rKr6pG+SksP/E2FSLIFCNl9
I0Yl+8JNqhSuvvXa61HBSWjjOdHjxZsLgZKuWVKqrjJTZMsUIVhtcKnbi27mBuVk
DvWhxGA4o3JuZNcEas2575FaNpriwkv6LC9N9EG48hkiOPtBj4S1Jvjd/+I131w5
5EFVEjME/o3UG2A0ipbsbdlX0Kjz/xMxo8VyDZgg+9mXg9uvT3pt0tliYDaEdN+P
GEdDyXSY3dAcyRHVA+JmzRqaXvGpuszXaCUdGn4wZmlpIV1v9eJFby5Nn4fnpLSN
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10636122234393132375284848865522739909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-17-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29046509504442139939280334477014346779112630268665381990173507740682664413740647874613188242453615908168827782055093687102297121231686567646725086381236634098188801995172077270084794656959149571030839344743975916558118182515033689893474475160497549458944561613462810347213986539156775193612934457282892265738511501792559238989361027010143425713388802557993108988911020198968697081290657756288027073563146614973909285639876225953408801837831009775985339597691632166935845479684380611292858556760464456580732161531521971928904632040482872837814559239083014783396823452895600614742151208763440699648478664033930596093271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50b52c01e394a46f20c1208c98163623cf06ae54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-17-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.university.hull.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.onmo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cafekoko.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kokoculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kokoelectronic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktcloud.alaqtar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.de.ehub-healthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.thehouseofkoko.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.travel-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.patmos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.victorinox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ehcb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.rilastil.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.validatagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.olympus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.onecrm.airfranceklm-acc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.airfranceklm.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.kpcgroup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.alfasigma.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.hrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mkt.meo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.racetools.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.sinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.solar-assistance.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.update.skanska.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.unicef.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.educo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter-mercedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.adu.ac.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.segurosnogal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.intofilm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter-veho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.send.schuco.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lc.ac.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.howdenre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mondobydefunc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.apart.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.druni.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.accademiartisti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.idealteam.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.by.immowelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.de.lofino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.nacionalgest.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.robmoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.np.drmax.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.imballaggi-2000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lusitania.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.beyond-hospitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.admin.ukdebtexpert.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.cbainfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.iso.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.f95.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.laenderbahn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.vtdseguros.elcorteingles.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cm.andalbrok.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.bahiaprinciperesidencesandgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.bloomingskin.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medical-rights.org.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.posti.ekosahko.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.cureleukaemia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.skilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ageas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.segurodirecto.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.rc4.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.saude.medis.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fifamuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.millenniumhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.channel.mannheim-business-school.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bridgement.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.skan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.agiliosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.clivet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.sigmaaldrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.usa.email.chattem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.akrikhin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.polpharmagroup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.payretailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.team.generali.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cantabrialabs.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.cyclica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.agiliosoftware.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.heitec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.cnosf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dach.service-recordati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ism.mkcld.seg-social.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.akdb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.persoenlich.haftpflichtkasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tgss.mkcld.seg-social.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bucklandgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.rentik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.srovnejto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.superpoistenie.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.inss.mkcld.seg-social.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018fe8eeb5be0000040300473045022100b54fa0dffc7e7598c86a3339080465c29c426b2d79579c76682fef01e192d1e902201fa8aaf87c2af3532a19970c5920b7d2f0df2cc613939ab9f2243cb58461f11c0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018fe8eeb5f60000040300473045022100ef28f7bfd6b9927b7d02d76a86770aa1b96794f3d8f4b155b01f76fbe8a9bbfd02204c6a7f07e5e2f58025c33addd6574d4984c4883940d9521c954cbed3f3c88dc7007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018fe8eeb6080000040300473045022065e4a12436f35e0cfa2a6a0ce458e200073a28e147f43ff845e190cc8e983955022100be35ef66623916cae4620481639ccef6ad8be7f487f1ec14ed6ee8101b9763ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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