tmscatalog.us.aimia.com

- Aimia Proprietary Loyalty U.S. Inc -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bf:9f:43:2d:1d:c6:77:e5:1a:c5:ef:4e:3f:ad:80:6e was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aimia Proprietary Loyalty U.S. Inc

Organization: Aimia Proprietary Loyalty U.S. Inc
Organization unit: Aimia.com
Organization unit: Hosted by Carlson Marketing Worldwide, Inc.
Organization unit: PremiumSSL
Address: Suite 150
Address: 1405 Xenium Lane N.
Postal code: 55441
State / Province: MN
Locality: Plymouth
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bf:9f:43:2d:1d:c6:77:e5:1a:c5:ef:4e:3f:ad:80:6e
Serial Number (int): 254709484891351725906324862676836909166
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cf:4b:92:b3:cc:8b:61:8a:05:67:62:65:9d:50:24:9d:c9:fd:51:4d
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 92:b8:37:a0:e4:03:b9:a4:55:da:e2:5f:8f:fd:26:d7:89:42:d3:df
Fingerprint (sha256): 08:2a:89:a6:84:b1:54:68:9d:30:33:69:50:8f:d4:c0:03:b2:2b:f1:f4:5f:f6:87:53:c2:7e:42:cb:12:a4:e1

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate tmscatalog.us.aimia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tmscatalog.us.aimia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tmscatalog.us.aimia.com
www.tmscatalog.us.aimia.com

Other certificates including the domain name aimia.com

(limited to 100 certificates)
*.ca.aimia.com
showtimerewardscatalog.us.aimia.com
aimia.com
cds1.cvent.com
us.aimia.com
cds1.cvent.com
cds1.cvent.com
cds2.cvent.com
*.ca.aimia.com
cds2.cvent.com
cds1.cvent.com
aimialegal.one10marketing.com
cds1.cvent.com
comstice.aimia.com
view.uk.aimia.com
aimia.com
exl.demo.us.aimia.com
tmscatalog.us.aimia.com
services.us.aimia.com
*.aimia.com
cds2.cvent.com
cds1.cvent.com
privacy-ethics-security.aimia.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
cds2.cvent.com
nectarnetwork.aimia.com
webinfo.us.aimia.com
us.aimia.com
interactadminpreprod.ca-intranet.aimia.com
cds1.cvent.com
cds2.cvent.com
rewardsintegration.one10marketing.com
secure-ede.us.aimia.com
cds2.cvent.com
navistarbdc-qa.us.aimia.com
emmprodreporting.ca-intranet.aimia.com
news.aimia.com
dc.ca.aimia.com
cds2.cvent.com
cds2.cvent.com
*.aimia.com
cds1.cvent.com
belkincdwrepslne.us.aimia.com
cds1.cvent.com
*.tst.ca-intranet.aimia.com
cds2.cvent.com
us.aimia.com
brandsite.aimia.com
us.aimia.com
dc.ca.aimia.com
emmdev.ca-intranet.aimia.com
interactadminprod2.ca-intranet.aimia.com
aimialegal.one10marketing.com
fusionTVR-qaua.us.aimia.com
*.aimia.com
us.aimia.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
*.tst.ca-intranet.aimia.com
emmprod.ca-intranet.aimia.com
cds1.cvent.com
cds2.cvent.com
cds2.cvent.com
applause.us.aimia.com
cds1.cvent.com
cds1.cvent.com
cds2.cvent.com
cds2.cvent.com
cds1.cvent.com
us.aimia.com
*.us.aimia.com
cds1.cvent.com
themix.us.aimia.com
cds2.cvent.com
adfs.aimia.com
cds2.cvent.com
zoetis.us.aimia.com
interactadminprod1.ca-intranet.aimia.com
sharpcatalog.us.aimia.com
us.aimia.com
cds2.cvent.com
cds1.cvent.com
cds2.cvent.com
cds1.cvent.com
emmprod.ca-intranet.aimia.com
cds1.cvent.com
galcyyzibm001.ca.aimia.com
news.aimia.com
interactadmindev2.ca-intranet.aimia.com
cds1.cvent.com
powerofyou.us.aimia.com
cds1.cvent.com
emmdev.ca-intranet.aimia.com
us.aimia.com
cds1.cvent.com
vpn2.us.aimia.com
hadoop-atom.ca-intranet.aimia.com

Certificate

The complete raw certificate details for tmscatalog.us.aimia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhREWVbZFA8PH9i1xjOS
poa12y4UrLHWgOR3twM/q+4raaVPfmJHC8cNADnEs0TM2j9YuEqZJ8RUOWdQYOP/
m7pXjKiSsv1rZ1fX0rZkeQ82Jgy2MBqCBrmrZwzR96BUqkEQtOeyKWfHrqvF4bsw
+sogY2nAUXiOR28iHvFFqX9wiVxAuBaX/V6Ec2yiHYDjSPMjKPnCKsYb6tYbX4FE
MLWPkIqLD3JLwhZvcGCLc0fhrOGhMF7mYKjqwDpaDHqroxB2HgRzREHlY2BTejn3
m2Xdztx8kX21sewzr4DmjA62PWuJdY6bbTxPLG/SvMiSp/iuoVwS5Jg5Mg3yzCA8
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254709484891351725906324862676836909166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55441'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suite 150'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1405 Xenium Lane N.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aimia Proprietary Loyalty U.S. Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aimia.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Carlson Marketing Worldwide, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PremiumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tmscatalog.us.aimia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23490318748055036682801619836992924813689486594540340411436900074647965291994432530386926525039235399238015934410585706636587553170004924963990408467482191791855751882875089114432315336419511765040237419475684877836281816338186352960463413255425311566577994961799736857318234565270122557562055938238319689934205002354366197433467893643044129648628011121579791308133741588173872721247968315996576155066388358541857226041513668037472495440824902491649779885675211913722111253464693182548412356382229005798685667297972974598869811103975352376582884918325151465638040418058065454697844248830828950461224447424477555342427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf4b92b3cc8b618a056762659d50249dc9fd514d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmscatalog.us.aimia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmscatalog.us.aimia.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b84cc258c2fbb13191553398fd6697ba5d5f016b8c8bb569006cf0a0467a7dac7bb72a933b4bb4e1faac7c2064741e296638adb27c2e570e708283786d765585cc061fde4507620a8562386ded25f42dad6b7399de27754af6a2a7906c8a6917481165a15cace75c373c0a420568d057f6bb2195489500aa85e0309e3d876c0adb0029397db45b2931645219e18fea763878a4b8e5ac8f7ffe522a2173f8548d18aa38f856a59b07f85f50b0719f99e2f15e0e93548c4907f5cb2ffef07e70a2c194681076196b250f2a650b2d33806021f0dcce60e317ef2005878cf4737778caf5118923c82d84007364dbfdff79e58b31c2408531fd9c99ab0569a59bfe4c