san-9-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:d9:6e:49:6b:8e:bf:6d:26:33:8c:30:1f:39:9c:54 was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:d9:6e:49:6b:8e:bf:6d:26:33:8c:30:1f:39:9c:54
Serial Number (int): 3787421291871622068957240118851771476
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 05:38:17:63:9a:fe:a0:5d:48:46:6b:32:52:cf:2a:3b:58:98:7a:59
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 36:9f:77:cc:c8:56:0b:5b:31:f6:78:09:be:db:6e:84:89:8c:d9:d2
Fingerprint (sha256): 0b:38:27:e1:63:5a:5c:8c:5f:02:ec:f0:29:f7:81:1c:a1:dc:ce:0e:25:7a:a3:78:10:d5:5c:11:66:b7:25:ff

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-9-s12.tlsprovisioning.exacttarget.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-9-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-9-s12.tlsprovisioning.exacttarget.com
image.1.greenboxcapital.com
image.acordocertoinformativo.com
image.bluenoteconcerts.com
image.communications.betaview.com.au
image.connect.alaska.edu
image.contact.topcard.co.jp
image.contacto.actinver.com.mx
image.contacto.bursanet.com.mx
image.contacto.dinn.com.mx
image.cordrantape-updates.com
image.crm.accretecap.com
image.crm.pharmacity.io
image.cs.alice.style
image.digital.sientra.com
image.discover.beautifi.com
image.divulga.sebraeap.com.br
image.divulga.sebraerr.com.br
image.e.bethel.edu
image.e.cub.com.au
image.e.essendonfc.com.au
image.e.nabshow.com
image.e.republic-finance.info
image.e.winstonflowers.com
image.economia.evoluaenergia.com.br
image.em.gacel.cl
image.em.hilbgroup.com
image.em.paulaschoice.com
image.email.505games.com
image.email.bancofcaliforniastadium.com
image.email.clinic.amazon.com
image.email.colbi.us
image.email.construction.com
image.email.detroitlions.com
image.email.jcpenney.com
image.email.joinempowercare.com
image.email.legaleaseplans.com
image.email.milanorepublic.com.au
image.email.miradry.com
image.email.mygenesisbank.com
image.email.novaquest.com.br
image.email.nyproton.com
image.email.opg.com
image.email.pipersandler.com
image.email.risetekglobal.com
image.email.shastaqa.com
image.email.strataplan.com.au
image.email.vksapp.com
image.email.wawanesabroker.com
image.engage.highland.com
image.engage.nzrugby.co.nz
image.familygroup.cl
image.globalbuyer.alibaba.com
image.go.gpwa.com
image.hcp.sientra.com
image.hello.optimalworkshop.com
image.hello.thislife.ngo
image.hello.x-claim.com
image.hub.richwoodbank.com
image.info.copec.cl
image.info.facetofacecoltd.com
image.info.hikaritv.net
image.info.mirati.com
image.info.skillsup.cloud
image.info.stagecrowd.live
image.info.truniagen.com
image.klisyrihcpupdate.com
image.m.ddtstore.com
image.ma.acure-fun.net
image.ma.staff-b.com
image.mail.bizbash.com
image.mail.connectmeetings.com
image.mail.connecttravel.com
image.mail.copec.cl
image.mail.okcdodgers.com
image.mail.oxygen.us
image.marketingcloud.wiredscore.com
image.mc.ardentrust.com
image.mc.bluespringwealth.com
image.mc.eyecity.jp
image.mc.grovepointfinancial.com
image.mc.kestrafinancial.com
image.mc.kestraholdings.com
image.mcgrathconnect.com.au
image.member.ga-tech.co.jp
image.ml.skylark.co.jp
image.plataforma.compensar.com
image.risingsunmail.com
image.seysara-updates.com
image.stopwasting.energy
image.wa.warc.jp
image.wpemail.worthpoint.com
image.yfet.yourfinancierexpert.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-9-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBCII1kYqsvPxcen5aa8
TIYFAqK6p6NuWtpzYgfmha8u03Da63PVt8/3+nopq4+WcJbF1OhHkyRcn+96rkKi
CtLw+JAzz+l2JveNhkrVFYvgNwWriUXQPkvNsuNeqKncLYuBzNp9gsXqX3yKni7+
PKbeqc4CIXjclfAOO5oAI87BnPiWFskp8H5z2jp35qy+lWmcUxqx+9DH1218zB9F
fPQPnE4opf69/SeOiBnwOHh/WTSP1qSRgV4Wlj1lQS5e1ERNSHVxWB4LtXN5pPif
NGHy55qAObDXqlsQMyrmnAvm2Use2KVrKg4ACVkyuZujFx61NpSPe3/VbmqVeraf
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3787421291871622068957240118851771476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-9-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25255813122383186077021990038489519520957524577740668823667650258528402282468873102287644192222502784938207850316477605187520811972387899328763534527267531738631071811133443198694542428337850370267042694029018685066849752589967400137170727469317847220895982347367137079122703448389873349346063919895805877964675180893191093618900718712158104668161759591327360121668536487846624586616165120426026047249434357919584875966411155586672080223878629218655476158682452098194937409786287574268977990852210381341567870526509129504417906301686695540795488158301006960305838913921900035971160942328014852782790219197686163611597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							053817639afea05d48466b3252cf2a3b58987a59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2590 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-9-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.1.greenboxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.acordocertoinformativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bluenoteconcerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.betaview.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.alaska.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.topcard.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.actinver.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.bursanet.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.dinn.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cordrantape-updates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.accretecap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.pharmacity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cs.alice.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.sientra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.discover.beautifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.divulga.sebraeap.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.divulga.sebraerr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bethel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.cub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.essendonfc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.nabshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.republic-finance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.winstonflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.economia.evoluaenergia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.gacel.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.hilbgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.paulaschoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.505games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bancofcaliforniastadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clinic.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.colbi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.construction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.detroitlions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jcpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.joinempowercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.legaleaseplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.milanorepublic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.miradry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mygenesisbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.novaquest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nyproton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.opg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pipersandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.risetekglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shastaqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.strataplan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vksapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wawanesabroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.highland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.nzrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.familygroup.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.globalbuyer.alibaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.gpwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hcp.sientra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.optimalworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.thislife.ngo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.x-claim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hub.richwoodbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.copec.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.facetofacecoltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.hikaritv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mirati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.skillsup.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.stagecrowd.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.truniagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.klisyrihcpupdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.ddtstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.acure-fun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.staff-b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bizbash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.connectmeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.connecttravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.copec.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.okcdodgers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.oxygen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingcloud.wiredscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.ardentrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.bluespringwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.eyecity.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.grovepointfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.kestrafinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.kestraholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mcgrathconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.member.ga-tech.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ml.skylark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.plataforma.compensar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.risingsunmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.seysara-updates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.stopwasting.energy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wa.warc.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wpemail.worthpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.yfet.yourfinancierexpert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00be9866a7e80029b1423b532dba4fbbb17ad44bf53b59ba52dcfd428df8211ffc7fc6602e3fd91823f3784815d03b0e015e61bd76865aecd19131ba2928d2960d58051e561ec417dc8d845c87b6fcea0247687f6ea9152e67a69e1e18848b74477f24a37dd373fe14f266d5fcc44c9c6ee4353295c5e87b3b20347c3e275ce0afb19f0c748245db88e91b565fe38b1f64ba933fe4eda4ee5d22db21a9ee9db0a73bd3499542d8e1f7b0f1c99e652193aede77169eb11e2a3a003189cf5c19b5de1ce68eb5fe5ac22b0b445ba1b74e4e4d63b58dbc1c537c1df50575f05d74b47c2d29d5e3dec14cd329413c7dadadc1f0c75f289c9dad50a2e2c79d4209852a05