san-2-s51.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:69:e2:31:08:2b:ad:60:df:b6:4c:06:91:18:d6:0c was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:69:e2:31:08:2b:ad:60:df:b6:4c:06:91:18:d6:0c
Serial Number (int): 19158970820414050243340667757293786636
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:b6:a4:ae:71:a7:d0:5c:4c:84:12:82:0b:c1:cc:ae:b1:18:ef:51
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 9b:10:20:ba:ae:9d:57:40:f7:9c:ac:37:3e:21:8f:dc:58:50:c7:55
Fingerprint (sha256): 0c:42:ad:53:e8:71:8c:d9:84:5b:ce:49:4e:d0:3a:cc:3c:0d:f7:fb:23:bd:dc:21:55:96:cc:b0:ee:b1:86:42

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-2-s51.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-2-s51.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-2-s51.tlsprovisioning.exacttarget.com
image.act.greenpeace.fr
image.comms.aspect.co.uk
image.communication.eurofiber.com
image.communications.bordgais.ie
image.contact.onexillium.nl
image.developpement.laforet.com
image.e.gemseducation.com
image.e.healthxchange.com
image.e.keter.com
image.e.kotrynagroup.eu
image.e.miro.com
image.em.fora.se
image.em.redcross.org.ua
image.email.any.do
image.email.associationtego.fr
image.email.brut.media
image.email.burgerking.it
image.email.cityfibre.com
image.email.dentalbeautypartners.co.uk
image.email.heinekenusa.com
image.email.konnect.com
image.email.koopjesdrogisterij.nl
image.email.kwf.nl
image.email.marketing.avivabroker.ie
image.email.mercedes-benzretailgroup.co.uk
image.email.mll.fi
image.email.novonordisknederland.nl
image.email.openjob.it
image.email.remarkable.com
image.email.sennder.com
image.email.sesh.ch
image.email.smartsn.be
image.email.thecalmzone.net
image.email.upf.edu
image.email.xite.com
image.emails.saboteur.world
image.emails.thomassabo.com
image.envios.digloservicer.com
image.euncet.es
image.france.brut.media
image.global.pluricosmetica.com
image.i.aramex.com
image.i.shopandship.com
image.info.dhre.ae
image.info.hauts-de-seine.fr
image.info.meglioquesto.it
image.info.multigioco.it
image.info.mutuelledesmotards.fr
image.info.pihlajalinna.fi
image.inss.seg-social.es
image.janssen.iqvia.com
image.kommunikation.amnesty.de
image.lc.labcampus.de
image.mail.ahvint.com
image.mail.betterbond.co.za
image.mail.brokerdental.es
image.mail.cultuurfonds.nl
image.mail.dentalclick.fr
image.mail.dontalia.com
image.mail.dontalia.de
image.mail.dontalia.it
image.mail.fadente.es
image.mail.proclinic.es
image.mail.teashop.com
image.mail.th-resorts.com
image.mails.sonderpreis-baumarkt.de
image.mail-sf.bitstamp.net
image.marketing.gonativ.org
image.marketing.nftouch.com.hk
image.marketing.onahotels.com
image.mc.acttiv.es
image.mc.laakaritilmanrajoja.fi
image.mch.menarini.com
image.mkt.bordbia.ie
image.news.6sicuro.it
image.news.acadia-info.com
image.news.envoituresimone.com
image.news.fiorucci.com
image.news.ingun.com
image.newsletter.buccellati.com
image.noticias.renault.es
image.notificacion.vivetuavalon.com
image.people-of.thehumansafetynet.org
image.preventivo.6sicuro.it
image.ros.rosendahl.com
image.seguros.generali.com
image.start.ynov.com
image.sunny.eu
image.sure-green.com
image.team.bayern-innovativ.de
image.team.hofats.com
image.theclimbinghangar.com
image.tp2.terrapinn.com
image.ukmail.heineken.com
image.web.nos.pt

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-2-s51.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPsjCCDpqgAwIBAgIQDmniMQgrrWDftkwGkRjWDDANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMx
MjI1MDAwMDAwWhcNMjUwMTI0MjM1OTU5WjCBjTELMAkGA1UEBhMCVVMxEzARBgNV
BAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoT
FFNhbGVzZm9yY2UuY29tLCBJbmMuMTIwMAYDVQQDEylzYW4tMi1zNTEudGxzcHJv
dmlzaW9uaW5nLmV4YWN0dGFyZ2V0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWsEurm/hy9QXTK3Lfzj9RRb4vIyprWcTzP0kSZhp0UrwpvZJEq
1RDVU9tX7VOODG4T3GnKA8gI//9ymvNTRZ7oeT0edEvt4Myv/3Pu60P3OXRkIMKR
zzOVqiHEZ0ILhd2tkin0ZUAaIqn3uC4ELb9s+MNakxoUeNSlC39mysqi+FP3jIpH
vDuITDQ7uJa4wTMNqxsZ/x6LExS5WIoLUxIZOH0/zGx5f/tOruFN60q09cgt41HE
1nc8BHErosBTOVUwSgJ8dFXJgVR1JJkgSkVY7x9Q09m+xVrT1Xsyp0R8590JoFMt
4IfnYt/HabM8HlYOq+iyzmT0ghv5X/IYzYUCAwEAAaOCDD8wggw7MB8GA1UdIwQY
MBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBQ/tqSucafQXEyEEoIL
wcyusRjvUTCCCjkGA1UdEQSCCjAwggosgilzYW4tMi1zNTEudGxzcHJvdmlzaW9u
aW5nLmV4YWN0dGFyZ2V0LmNvbYIXaW1hZ2UuYWN0LmdyZWVucGVhY2UuZnKCGGlt
YWdlLmNvbW1zLmFzcGVjdC5jby51a4IhaW1hZ2UuY29tbXVuaWNhdGlvbi5ldXJv
ZmliZXIuY29tgiBpbWFnZS5jb21tdW5pY2F0aW9ucy5ib3JkZ2Fpcy5pZYIbaW1h
Z2UuY29udGFjdC5vbmV4aWxsaXVtLm5sgh9pbWFnZS5kZXZlbG9wcGVtZW50Lmxh
Zm9yZXQuY29tghlpbWFnZS5lLmdlbXNlZHVjYXRpb24uY29tghlpbWFnZS5lLmhl
YWx0aHhjaGFuZ2UuY29tghFpbWFnZS5lLmtldGVyLmNvbYIXaW1hZ2UuZS5rb3Ry
eW5hZ3JvdXAuZXWCEGltYWdlLmUubWlyby5jb22CEGltYWdlLmVtLmZvcmEuc2WC
GGltYWdlLmVtLnJlZGNyb3NzLm9yZy51YYISaW1hZ2UuZW1haWwuYW55LmRvgh5p
bWFnZS5lbWFpbC5hc3NvY2lhdGlvbnRlZ28uZnKCFmltYWdlLmVtYWlsLmJydXQu
bWVkaWGCGWltYWdlLmVtYWlsLmJ1cmdlcmtpbmcuaXSCGWltYWdlLmVtYWlsLmNp
dHlmaWJyZS5jb22CJmltYWdlLmVtYWlsLmRlbnRhbGJlYXV0eXBhcnRuZXJzLmNv
LnVrghtpbWFnZS5lbWFpbC5oZWluZWtlbnVzYS5jb22CF2ltYWdlLmVtYWlsLmtv
bm5lY3QuY29tgiFpbWFnZS5lbWFpbC5rb29wamVzZHJvZ2lzdGVyaWoubmyCEmlt
YWdlLmVtYWlsLmt3Zi5ubIIkaW1hZ2UuZW1haWwubWFya2V0aW5nLmF2aXZhYnJv
a2VyLmllgippbWFnZS5lbWFpbC5tZXJjZWRlcy1iZW56cmV0YWlsZ3JvdXAuY28u
dWuCEmltYWdlLmVtYWlsLm1sbC5maYIjaW1hZ2UuZW1haWwubm92b25vcmRpc2tu
ZWRlcmxhbmQubmyCFmltYWdlLmVtYWlsLm9wZW5qb2IuaXSCGmltYWdlLmVtYWls
LnJlbWFya2FibGUuY29tghdpbWFnZS5lbWFpbC5zZW5uZGVyLmNvbYITaW1hZ2Uu
ZW1haWwuc2VzaC5jaIIWaW1hZ2UuZW1haWwuc21hcnRzbi5iZYIbaW1hZ2UuZW1h
aWwudGhlY2FsbXpvbmUubmV0ghNpbWFnZS5lbWFpbC51cGYuZWR1ghRpbWFnZS5l
bWFpbC54aXRlLmNvbYIbaW1hZ2UuZW1haWxzLnNhYm90ZXVyLndvcmxkghtpbWFn
ZS5lbWFpbHMudGhvbWFzc2Fiby5jb22CHmltYWdlLmVudmlvcy5kaWdsb3NlcnZp
Y2VyLmNvbYIPaW1hZ2UuZXVuY2V0LmVzghdpbWFnZS5mcmFuY2UuYnJ1dC5tZWRp
YYIfaW1hZ2UuZ2xvYmFsLnBsdXJpY29zbWV0aWNhLmNvbYISaW1hZ2UuaS5hcmFt
ZXguY29tghdpbWFnZS5pLnNob3BhbmRzaGlwLmNvbYISaW1hZ2UuaW5mby5kaHJl
LmFlghxpbWFnZS5pbmZvLmhhdXRzLWRlLXNlaW5lLmZyghppbWFnZS5pbmZvLm1l
Z2xpb3F1ZXN0by5pdIIYaW1hZ2UuaW5mby5tdWx0aWdpb2NvLml0giBpbWFnZS5p
bmZvLm11dHVlbGxlZGVzbW90YXJkcy5mcoIaaW1hZ2UuaW5mby5waWhsYWphbGlu
bmEuZmmCGGltYWdlLmluc3Muc2VnLXNvY2lhbC5lc4IXaW1hZ2UuamFuc3Nlbi5p
cXZpYS5jb22CHmltYWdlLmtvbW11bmlrYXRpb24uYW1uZXN0eS5kZYIVaW1hZ2Uu
bGMubGFiY2FtcHVzLmRlghVpbWFnZS5tYWlsLmFodmludC5jb22CG2ltYWdlLm1h
aWwuYmV0dGVyYm9uZC5jby56YYIaaW1hZ2UubWFpbC5icm9rZXJkZW50YWwuZXOC
GmltYWdlLm1haWwuY3VsdHV1cmZvbmRzLm5sghlpbWFnZS5tYWlsLmRlbnRhbGNs
aWNrLmZyghdpbWFnZS5tYWlsLmRvbnRhbGlhLmNvbYIWaW1hZ2UubWFpbC5kb250
YWxpYS5kZYIWaW1hZ2UubWFpbC5kb250YWxpYS5pdIIVaW1hZ2UubWFpbC5mYWRl
bnRlLmVzghdpbWFnZS5tYWlsLnByb2NsaW5pYy5lc4IWaW1hZ2UubWFpbC50ZWFz
aG9wLmNvbYIZaW1hZ2UubWFpbC50aC1yZXNvcnRzLmNvbYIjaW1hZ2UubWFpbHMu
c29uZGVycHJlaXMtYmF1bWFya3QuZGWCGmltYWdlLm1haWwtc2YuYml0c3RhbXAu
bmV0ghtpbWFnZS5tYXJrZXRpbmcuZ29uYXRpdi5vcmeCHmltYWdlLm1hcmtldGlu
Zy5uZnRvdWNoLmNvbS5oa4IdaW1hZ2UubWFya2V0aW5nLm9uYWhvdGVscy5jb22C
EmltYWdlLm1jLmFjdHRpdi5lc4IfaW1hZ2UubWMubGFha2FyaXRpbG1hbnJham9q
YS5maYIWaW1hZ2UubWNoLm1lbmFyaW5pLmNvbYIUaW1hZ2UubWt0LmJvcmRiaWEu
aWWCFWltYWdlLm5ld3MuNnNpY3Vyby5pdIIaaW1hZ2UubmV3cy5hY2FkaWEtaW5m
by5jb22CHmltYWdlLm5ld3MuZW52b2l0dXJlc2ltb25lLmNvbYIXaW1hZ2UubmV3
cy5maW9ydWNjaS5jb22CFGltYWdlLm5ld3MuaW5ndW4uY29tgh9pbWFnZS5uZXdz
bGV0dGVyLmJ1Y2NlbGxhdGkuY29tghlpbWFnZS5ub3RpY2lhcy5yZW5hdWx0LmVz
giNpbWFnZS5ub3RpZmljYWNpb24udml2ZXR1YXZhbG9uLmNvbYIlaW1hZ2UucGVv
cGxlLW9mLnRoZWh1bWFuc2FmZXR5bmV0Lm9yZ4IbaW1hZ2UucHJldmVudGl2by42
c2ljdXJvLml0ghdpbWFnZS5yb3Mucm9zZW5kYWhsLmNvbYIaaW1hZ2Uuc2VndXJv
cy5nZW5lcmFsaS5jb22CFGltYWdlLnN0YXJ0Lnlub3YuY29tgg5pbWFnZS5zdW5u
eS5ldYIUaW1hZ2Uuc3VyZS1ncmVlbi5jb22CHmltYWdlLnRlYW0uYmF5ZXJuLWlu
bm92YXRpdi5kZYIVaW1hZ2UudGVhbS5ob2ZhdHMuY29tghtpbWFnZS50aGVjbGlt
YmluZ2hhbmdhci5jb22CF2ltYWdlLnRwMi50ZXJyYXBpbm4uY29tghlpbWFnZS51
a21haWwuaGVpbmVrZW4uY29tghBpbWFnZS53ZWIubm9zLnB0MD4GA1UdIAQ3MDUw
MwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9EaWdpQ2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDBIoEag
RIZCaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNS
U0FTSEEyNTYyMDIwQ0ExLTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEy
NTYyMDIwQ0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBADpbHThgnxFEGtc/zXtVGVYnDIhdNaPXjZeE
QWCj57J0WfMlcx8vhUwbRmYl4FhU65CtiPCeotC2PWMQJE9olT46pA0053kUVznD
I41U3DcOFY4p3BO2OGDkRuKZre1ZQouCzFl5kdmHrf3FCqtpwv+QF/zd9hXp1W/n
IRFSRqunMzXAcHzwffTEXL+9PzPZtyFG+4dC3fa57ApSVc97HD3aMsKgRf8v/yTF
sB7qQZKeW3evd2CI20U+UL04xR4Hipua2UBEUXXjT/wnASsbRBtXTRI/OPr9+H/M
TAF0uDh18QxjxvnEwIpMUL3XriTG/8IVI6fc2vrkY1dZzo4MOn4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtawS6ub+HL1BdMrct/OP
1FFvi8jKmtZxPM/SRJmGnRSvCm9kkSrVENVT21ftU44MbhPcacoDyAj//3Ka81NF
nuh5PR50S+3gzK//c+7rQ/c5dGQgwpHPM5WqIcRnQguF3a2SKfRlQBoiqfe4LgQt
v2z4w1qTGhR41KULf2bKyqL4U/eMike8O4hMNDu4lrjBMw2rGxn/HosTFLlYigtT
Ehk4fT/MbHl/+06u4U3rSrT1yC3jUcTWdzwEcSuiwFM5VTBKAnx0VcmBVHUkmSBK
RVjvH1DT2b7FWtPVezKnRHzn3QmgUy3gh+di38dpszweVg6r6LLOZPSCG/lf8hjN
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19158970820414050243340667757293786636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-2-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22933985999888159678067293375679801332546504908306285224866098302314426539685623345645793511610200913236023309451447642377291687129212678984628715348530252042502337050448018762526254586970266364721629422264819267703205602055678931460411317821557462814186930421164329734614087967054945039937396124743413620448073549512214311501838675338368171266443436792504347892307770062924892248844130628137916689747440389702064395366083074704053327004775317756018397134037552721710175810374009614121829331051793920862838478626702433328063762256097680705386373833970469551644778151147440772509685618954705900962640188887453876669829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fb6a4ae71a7d05c4c8412820bc1ccaeb118ef51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-2-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.act.greenpeace.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.aspect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.eurofiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.bordgais.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.onexillium.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.developpement.laforet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gemseducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.healthxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.keter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.kotrynagroup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.miro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.fora.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.redcross.org.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.any.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.associationtego.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.brut.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.burgerking.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cityfibre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dentalbeautypartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.heinekenusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.konnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.koopjesdrogisterij.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kwf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.marketing.avivabroker.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mercedes-benzretailgroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mll.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.novonordisknederland.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.openjob.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.remarkable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sennder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sesh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.smartsn.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.thecalmzone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.upf.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.xite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.saboteur.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.thomassabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.envios.digloservicer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.euncet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.france.brut.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global.pluricosmetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.aramex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.shopandship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.dhre.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.hauts-de-seine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.meglioquesto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.multigioco.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mutuelledesmotards.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.pihlajalinna.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.inss.seg-social.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.janssen.iqvia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kommunikation.amnesty.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lc.labcampus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ahvint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.betterbond.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.brokerdental.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cultuurfonds.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dentalclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dontalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dontalia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dontalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fadente.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.proclinic.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.teashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.th-resorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mails.sonderpreis-baumarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-sf.bitstamp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.gonativ.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.nftouch.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.onahotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.acttiv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.laakaritilmanrajoja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mch.menarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.bordbia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.6sicuro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.acadia-info.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.envoituresimone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.fiorucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.ingun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.buccellati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.noticias.renault.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notificacion.vivetuavalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.people-of.thehumansafetynet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.preventivo.6sicuro.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ros.rosendahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.seguros.generali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.start.ynov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sunny.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sure-green.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.team.bayern-innovativ.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.team.hofats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.theclimbinghangar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tp2.terrapinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ukmail.heineken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.nos.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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