secure-usea1-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:5e:a0:16:92:95:60:0d:b5:d0:a0:62:4f:14:2c:10 was issued on by DigiCert Inc.

With 202 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5e:a0:16:92:95:60:0d:b5:d0:a0:62:4f:14:2c:10
Serial Number (int): 5808234861763491850910489399369411600
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a1:24:22:07:0b:2a:3d:86:5c:0d:47:b7:24:74:e2:d0:44:48:db:f8
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f1:f3:df:14:74:ce:fa:e1:e7:3f:64:f7:43:27:4a:b6:33:3b:15:3e
Fingerprint (sha256): 10:18:97:7f:ef:1a:3e:4b:8f:5a:ab:52:9f:4e:6e:40:30:db:7d:30:30:28:db:b0:4b:4f:33:7c:17:70:aa:d2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure-usea1-1.tessituranetwork.com

202

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-usea1-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tn.services
*.tnhs.cloud
secure-usea1-1.tessituranetwork.com
ticketing.rockhall.com
my.avaopera.org
my.adventuretheatre-mtc.org
tickets.annenbergcenter.org
tickets.wilmatheater.org
secure.vafest.org
dpactickets.nd.edu
my.torontoconsort.org
my.tafelmusik.org
secure.rutheckerdhall.com
shop.burnsfilmcenter.org
tickets.peopleslight.org
my.high.org
tickets.frostscience.org
engage.clevelandart.org
my.artsphilly.org
tnew.gardnermuseum.org
my.wexarts.org
my.americanancestors.org
my.historicnewengland.org
my.papermill.org
supporter.fonz.org
tickets.mediatheatre.org
tickets.brtstage.org
tickets.11thhourtheatrecompany.org
my.pem.org
my.osc.org
ticket.americanrepertorytheater.org
patrons.imaginationstage.org
my.cballet.org
my.bigarts.org
cart.bostonballet.org
tickets.georgiaaquarium.org
my.tdf.org
reservations.bam.org
tickets.paintedbride.org
boxoffice.porttix.com
cart.2st.com
my.nycopera.com
ticketing.cincyplay.com
tickets.dukeon42.org
my-mon.nature.ca
cart.handelandhaydn.org
ramp.mysticaquarium.org
tickets.olneytheatre.org
myptc.philadelphiatheatrecompany.org
shop.ctsciencecenter.org
naramptest.americanancestors.org
ticketing.fwphil.org
my.naplesplayers.org
secure.cooperhewitt.org
mon.nature.ca
cart.titusvilleplayhouse.com
secure.georgestreetplayhouse.org
tickets.fergusoncenter.org
my.nature.ca
my.louisvilleballet.org
secure.nbpac.org
my.cbusarts.com
my.shubert.com
tickets.flynncenter.org
my.museumaacm.org
cart.sarasotaballet.org
tickets.mirvish.com
visit.ncartmuseum.org
cart.scchildrenstheatre.org
checkout.mountvernon.org
cart.lighthousetheatre.com
secure.virginiahistory.org
secure.mayoarts.org
harrypotterbooking.ticketking.com
tickets.nascarhall.com
hoptix.dartmouth.edu
my.smithsonianassociates.org
naramptest.high.org
secure.thecenterpresents.org
tickets.newvictory.org
tickets.callawaygardens.com
my.ringling.org
my.operacarolina.org
my.filmforum.org
tickets.su.edu
visit.thejamesmuseum.org
naramptest.frostscience.org
naramptest.woodruffcenter.org
my.rpo.org
naramptest.georgiaaquarium.org
my.ballet.ca
my.riversidetheatre.com
give.ringling.org
tickets.ithaca.edu
secure.virginiafilmfestival.org
tickets.hudsonvalley.org
tickets.thevillages.com
cart.midlandcenter.org
naramptest.tdf.org
secure.hillwoodmuseum.org
tnew.mfa.org
my.kazoocivic.com
boxoffice.fairfieldtheatre.org
shop.joyce.org
purchase.flatrockplayhouse.org
my.mocanyc.org
my.fords.org
purchase.filmlinc.org
tickets.shakespearetheatre.org
tickets.thewhiting.com
tickets.arenastage.org
tickets.horizontheatre.com
cart.michiganopera.org
my.alliancetheatre.org
tickets.grandtheatre.com
tickets.carolinaperformingarts.org
ticketing.vaopera.org
tickets.shawfest.com
ticketing.hartfordstage.org
ysd-tickets.yale.edu
ticketsales.puppet.org
tickets.youngcentre.ca
ticketing.spoletousa.org
tix.operaphila.org
tickets.miamicityballet.org
tickets.kwsymphony.ca
tickets.auroratheatre.com
est1.tessituranetwork.com
est2.tessituranetwork.com
tickets.kaufmanmusiccenter.org
commerce.armoryonpark.org
purchase.metmuseum.org
tickets.ums.org
tickets.atlantaopera.org
tickets.rockportmusic.org
sales.thepowerplant.org
ticketing.jazz.org
charlottesville.theparamount.net
tickets.va-rep.org
tickets.celebrityseries.org
tickets.irtlive.com
my.harbourfrontcentre.com
tickets.themahaffey.com
tickets.artisnaples.org
tickets.massmoca.org
tickets.a2sf.org
shop.fscjartistseries.org
tickets.asolorep.org
tickets.millerauditorium.com
tickets.sarasotaopera.org
ticketing.marylandhall.org
tickets.appellcenter.org
my.tso.ca
tickets.nyu.edu
naramptest.lsc.org
naramptest.fords.org
tickets.vastage.org
my.jacobspillow.org
the.floridaorchestra.org
tickets.ogunquitplayhouse.org
my.icaboston.org
tickets.mccarter.org
tickets.floridastudiotheatre.org
experience.museumofcontemporaryart.ca
my.firstpersonarts.org
cart.gettysburgfoundation.org
my.airzoo.org
my.intrepidmuseum.org
tickets.playmakersrep.org
boxoffice.kalamazoosymphony.com
my.jaxsymphony.org
cart.woodruffcenter.org
ticketing.agakhanmuseum.org
my.ticketcenterstage.com
my.orlandophil.org
tickets.virginiasymphony.org
tickets.masseyhallroythomsonhall.com
tickets.lsc.org
tickets.AtlantaBallet.com
tsoundcheck.tso.ca
securesite.baychamberconcerts.org
ticketing.blo.org
summercab-tickets.yale.edu
order.sciencenorth.ca
music-tickets.yale.edu
yalerep-tickets.yale.edu
buy.sarasotaorchestra.org
cabaret-tickets.yale.edu
events.folger.edu
my.coc.ca
mycart.chambermusicsociety.org
my.cincinnatiopera.org
my.actorstheatre.org
tickets.thegrandwilmington.org
mirvish.ticketking.com
my.ica.vcu.edu
secure.masongross.rutgers.edu
tickets.fishercenter.bard.edu
tickets.arts.emory.edu
tickets.modlin.richmond.edu
tickets.smtd.umich.edu
tickets.artsboxoffice.virginia.edu

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-usea1-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+DmeacGBvsOMn/8vLTZ
miqPYLSwa+i/124k2VIUsqzmQr0JtkI9y+EQwERXItlTMM3cc5ow2tQ/4xmgUogB
tdtnxBxW1xebXrOq6j6mbxsEkl2wvNMyah2d5ET+5KxeBb+PhYB7+8O6ADn1bL17
KVrjt1vN2WUBF5Nzlgg0Jdr6kAuOFzqSHFlCzieRvpxEwlUvPNz/j7mgMQXPlS5/
KEkMTxREpZTzDzySUY3aPyGKpYEZvDV0cXrP/XoJjdSMtwZkssxTGS8G+q10GMgN
8x+LBnZCCvZevm0zRTz55zmHwA9Ek3XlcOcW5YPCcYa4Ppvt0etH6t3m++95Suor
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5808234861763491850910489399369411600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-usea1-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25232325156494685219972993196025710304958784084834474036201439210634850483990175380682613595950301728235059629506008049534591135445487814655437348207833546984653173533990609038478888820835827236634990733048408530760795493918595890030545190672935501623442317519780636793974838097310388392729151823089139713274282002890727370274640088153844932697503674251832870759058961454651143389580231660755495250407089852391164141407014355253667322642385751245270721449927458671627321262951102368981652267998690629568463170460590496321717329847858080028052012862156732312238401791806969543504554631265163113149950137152193566485379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a12422070b2a3d865c0d47b72474e2d04448dbf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4879 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-usea1-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.rockhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.avaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.adventuretheatre-mtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.annenbergcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wilmatheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vafest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpactickets.nd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.torontoconsort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tafelmusik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rutheckerdhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.burnsfilmcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peopleslight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.frostscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.clevelandart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artsphilly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.gardnermuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wexarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.historicnewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.papermill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.fonz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mediatheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.brtstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.11thhourtheatrecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.osc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.americanrepertorytheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrons.imaginationstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bigarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.bostonballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tdf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.paintedbride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.porttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.2st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nycopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.cincyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dukeon42.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mon.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.handelandhaydn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramp.mysticaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.olneytheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myptc.philadelphiatheatrecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ctsciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.fwphil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.naplesplayers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cooperhewitt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.titusvilleplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.georgestreetplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fergusoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.louisvilleballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.nbpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cbusarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shubert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.flynncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.museumaacm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sarasotaballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mirvish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.ncartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.scchildrenstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.mountvernon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lighthousetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginiahistory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mayoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotterbooking.ticketking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nascarhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoptix.dartmouth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smithsonianassociates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thecenterpresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.newvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.callawaygardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ringling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacarolina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.filmforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.thejamesmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.frostscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.rpo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ballet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.riversidetheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give.ringling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ithaca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.virginiafilmfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hudsonvalley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thevillages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.midlandcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.tdf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hillwoodmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.mfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.kazoocivic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.fairfieldtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.joyce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.flatrockplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mocanyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.fords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.filmlinc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shakespearetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewhiting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.arenastage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.horizontheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.michiganopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.alliancetheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.grandtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.carolinaperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.vaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.shawfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.hartfordstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysd-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketsales.puppet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.youngcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.spoletousa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.operaphila.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.miamicityballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kwsymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.auroratheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'est1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'est2.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kaufmanmusiccenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerce.armoryonpark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.metmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ums.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.atlantaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.rockportmusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.thepowerplant.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.jazz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottesville.theparamount.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.va-rep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.celebrityseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.irtlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.harbourfrontcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.themahaffey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artisnaples.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.massmoca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.a2sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.fscjartistseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.asolorep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.millerauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sarasotaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.marylandhall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.appellcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nyu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.lsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.fords.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.vastage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jacobspillow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the.floridaorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ogunquitplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.icaboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mccarter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.floridastudiotheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.museumofcontemporaryart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.firstpersonarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.gettysburgfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.intrepidmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.playmakersrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.kalamazoosymphony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jaxsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.agakhanmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ticketcenterstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.orlandophil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.virginiasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.masseyhallroythomsonhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lsc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.AtlantaBallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsoundcheck.tso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.baychamberconcerts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.blo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summercab-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.sciencenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yalerep-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.sarasotaorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabaret-tickets.yale.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.folger.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.coc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycart.chambermusicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cincinnatiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.actorstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegrandwilmington.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirvish.ticketking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ica.vcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.masongross.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fishercenter.bard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.arts.emory.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.modlin.richmond.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.smtd.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsboxoffice.virginia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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