san-3-s11.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:e0:f5:87:2e:47:1a:fd:bf:7c:75:b9:58:bd:d6:61 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:e0:f5:87:2e:47:1a:fd:bf:7c:75:b9:58:bd:d6:61
Serial Number (int): 15789562350422981722999500935138236001
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 81:7b:f2:68:df:5b:d5:95:e6:8d:6b:3a:e1:4b:80:3f:7a:85:51:2f
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 96:9e:b0:60:c9:02:fe:bb:7c:24:93:7c:38:6a:2e:ea:db:2b:7e:d5
Fingerprint (sha256): 0d:76:0d:23:3c:4c:83:a8:c8:0a:59:37:10:36:39:dd:5d:01:36:bb:ac:0d:96:b6:eb:16:c9:3b:10:b2:4f:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-3-s11.tlsprovisioning.exacttarget.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-3-s11.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-3-s11.tlsprovisioning.exacttarget.com
image.advancement.umassd.edu
image.advancement.umassmed.edu
image.advise.gtc.edu
image.app.valetlivinghome.com
image.atendimento.vr.com.br
image.biz.maxis.com.my
image.br.goodyear.com
image.clientes.caser.es
image.communications.breezeline.us
image.communications.zenfolio.com
image.connect.tundrafmp.com
image.connectbecome.nz
image.contact.umbc.edu
image.contactomx.kcc.com
image.correofybeca.com
image.credito.bemol.com.br
image.direct-mail.sf-assuranceamerica.com
image.e.befranki.com
image.e.dummies.com
image.e.fusionacademy.com
image.e.obagi.com
image.e.parker-pen.cn
image.e.parker-pen.co.uk
image.e.parkerpen-de.de
image.e.parkerpen-ja.jp
image.e.poweredbyzeus.com
image.e.rotring.com.tr
image.e.rotring-uk.com
image.e.uslawshield.com
image.e.vcu.com
image.e.waterman-ja.jp
image.e.waterman-zh.cn
image.em.shopmo.com
image.email.ad-group.com.au
image.email.bankwithfidelity.com
image.email.gsk-resources.com
image.email.harklinikken.com
image.email.humanigen.com
image.email.lac.com.tw
image.email.lacworldwide.com.my
image.email.macrogenics.com
image.email.renovaenergy.com
image.email.spahnandrose.com
image.email.tpreducation.com
image.email.zogenix.info
image.email-fringe.com
image.embracecare.com.br
image.enews-jp.chanel.com
image.envio.sistemapoliedro.com
image.fedcomms-np.delltechnologies.com
image.ficontact.com
image.gileadprofessional.com
image.global.aesop.com
image.happlans.org
image.hello-misshaus.com
image.home.historymaker.com
image.info.bexbusiness.com
image.info.gilead.eu
image.info.souvagalume.com.br
image.info.umchealthsystem.com
image.info-professionalpt.com
image.intelbras-info.com
image.mail.airforce.com
image.mail.gib.co.nz
image.mail.lbsfunding.com
image.mail.medmen.com
image.mail.nbaa.org
image.mail.solvwellness.com
image.mail.togetherhealth.com
image.mailcruzverde.com.co
image.mailmaicao.cl
image.marketing.bausch.com
image.marketing.wundermanthompson.com
image.marketing-emailsephora.com
image.marketing-trustwaydirect.com
image.mc.adkms.jp
image.mc.auburn.edu
image.mccb.chase.com
image.medicare.quotewizard.com
image.mensajescruzverde.cl
image.message.fsu.edu
image.message.usc.edu
image.mkt.esfera.com.vc
image.mkt.lojasmarisa.com.br
image.mktg.sifton.com
image.myfloridaprepaidemail.com
image.naoresponda.vr.com.br
image.newsabasteceai.com.br
image.newskmdevantagens.com.br
image.newsletter.pilma.org
image.now.essentialengine.com
image.produtosvr.vr.com.br
image.relacionamento.velki.com.br
image.relacionamento.vr.com.br
image.savewithiswitch.com
image.sfma.tiffany-jp.net
image.smartfitco.com.co
image.testemail.voila.ca
image.vendavr.vr.com.br

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-3-s11.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwACjMERFjN+lXx/sV0uB
vBmE3vPgIKriFwoPPFgEZNTUmgaOMdtx91TxRWlO4DYXEZHiY51n9c7JRnEPv9CM
qliyMt879ojbGQGbFk8Terg6pn/aiK6/muspMs6VpBaAr5TPrjM5FNxI6AlameCT
w1EbU0CvaDEQNLdiwJpR3po1xuGWCFJN4hidY46F+uKGocfjmxpm7NnWtCnUvjor
fUX14m7E9T1nkBtoAPOBGCqAlny1s449gtbQCehVVeAmlpW1+4q7xGX2p52G3ZMg
DUj2jANL6a91tfzpItHCh4v7niTsov+eqvh8ZrUBsschHvrNpQMx5DTyAdYuKH8T
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15789562350422981722999500935138236001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-3-s11.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24238068894378329045703151590391734168658731533109416267333481154422627474367710767537712849407750862643554483981575565097950883218142713354970646140972768976040701768832066084340594313416740911018521601110655869721076217078955607325061864521029869404954817478554871361952487029789860413725249898400808291543816644059800910373786954867602228709520680290822697942545198993189295269652502032483734360868315682038217054014858678086903447811484452523002149814293473128251323449144212082540620260788889296926055952662643174802193150378136578762611639706475999425655543732341849661522387648203017975247824245961495156822913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							817bf268df5bd595e68d6b3ae14b803f7a85512f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-3-s11.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advancement.umassd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advancement.umassmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advise.gtc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.app.valetlivinghome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.atendimento.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.biz.maxis.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.br.goodyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientes.caser.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.breezeline.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.zenfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.tundrafmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connectbecome.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.umbc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contactomx.kcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correofybeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.credito.bemol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.direct-mail.sf-assuranceamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.befranki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dummies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fusionacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.obagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.parker-pen.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.parker-pen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.parkerpen-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.parkerpen-ja.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.poweredbyzeus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.rotring.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.rotring-uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.uslawshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.waterman-ja.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.waterman-zh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.shopmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ad-group.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bankwithfidelity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.gsk-resources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.harklinikken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.humanigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lac.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lacworldwide.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.macrogenics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.renovaenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.spahnandrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tpreducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.zogenix.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-fringe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.embracecare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enews-jp.chanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.envio.sistemapoliedro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fedcomms-np.delltechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ficontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gileadprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global.aesop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.happlans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello-misshaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.home.historymaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bexbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.gilead.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.souvagalume.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.umchealthsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-professionalpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.intelbras-info.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.airforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.gib.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lbsfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.medmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nbaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.solvwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.togetherhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailcruzverde.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailmaicao.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.bausch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.wundermanthompson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-emailsephora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-trustwaydirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.adkms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.auburn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mccb.chase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicare.quotewizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mensajescruzverde.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.message.fsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.message.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.esfera.com.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.lojasmarisa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.sifton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.myfloridaprepaidemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.naoresponda.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsabasteceai.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newskmdevantagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.pilma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.now.essentialengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.produtosvr.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.velki.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.savewithiswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfma.tiffany-jp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smartfitco.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.testemail.voila.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vendavr.vr.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002bbe475957a76ecce1b2bdc3166ec8e2d9f3bd293907c503801912931186f606f4925d4fc0cdc24df6e7fad5c8ccb954db70cbf9d63eae01fe5d558ea3daef056244786392219d2b316fec8238ee9b45954ddcb0476e6065449bda55baf871002352eac79084be540d8eac5a6ede8bd8cffe80844a44710b07bb3bc6de51ca9fedf7a8285f1ab3cd6510fc73a23fefbf31087885fc8d27e526c35761d6811586f1989e25cad067f4abb07d689b1e683c7191fadb351835131cdd06cade7be812bd8648bcf0fb13294a50c9cb3b167e93157b991de4d299925a57a908ed91237fc93fb02a35f998754eba8dfca658e5f1e9baf7ee9e19784c94c286aa7913fb73