san-16-s50.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:1d:4c:62:fc:b0:d8:e1:a7:ca:f8:7d:15:a9:ec:19 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:1d:4c:62:fc:b0:d8:e1:a7:ca:f8:7d:15:a9:ec:19
Serial Number (int): 9456721885085742649410935821070625817
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2c:20:a5:65:3f:e4:d3:b9:2c:18:6b:4f:65:08:ec:9e:b6:3f:64:66
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): d5:2e:f0:85:7e:88:20:20:d7:c3:2d:ec:24:96:0b:86:fb:06:91:ce
Fingerprint (sha256): 12:14:c3:6b:47:f5:cc:52:98:7b:8a:65:ea:da:bf:2c:1f:5a:87:4d:7d:54:2d:6b:9b:68:4e:e5:7e:b6:c9:15

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-16-s50.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-16-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-16-s50.tlsprovisioning.exacttarget.com
image.adv.galvanina.com
image.airbp.email
image.bauerfeind-sports.com
image.ccp.clientcareplatform.com
image.cee.chiesi.com
image.client.foyerglobalhealth.com
image.communication.carglass.fr
image.comunicacion.huelva24.com
image.comunicacion.stellantisfinance.es
image.comunicazione.isybank.com
image.connect.four-paws.org.au
image.contact.mobilize-fs.pl
image.contact.mobilize-pay.com
image.content.bacardilimited.com
image.content.dewars.com
image.core-news.yves-rocher.com
image.crm.wits.ac.za
image.de.nestlehealthscience.com
image.dentelli.qunosuite.com
image.deptstudios.com
image.e.dyson.com.sg
image.e.dyson.com.tr
image.e.dyson.in
image.e.holidaydiscounter.com
image.em.at.leasys.com
image.em.be.leasys.com
image.em.de.leasys.com
image.em.es.leasys.com
image.em.fr.leasys.com
image.em.joinrs.com
image.em.nl.leasys.com
image.em.pl.leasys.com
image.em.pt.leasys.com
image.em.uk.leasys.com
image.email.abacus.es
image.email.a-hus.se
image.email.algeacare.com
image.email.ceac.com
image.email.cetaphil.ca
image.email.clinicadiagonal.com
image.email.dentapointinternational.com
image.email.derome.se
image.email.deustoformacion.com
image.email.deustosalud.com
image.email.distrettolaghi.it
image.email.grandoptical.pt
image.email.multiopticas.pt
image.email.myhairmedical.de
image.email.nordichotels.com
image.email.strawberry.no
image.email.ticino.ch
image.email.turismonovara.it
image.email.vaillant.dk
image.emails.dogstrust.ie
image.es.chiesi.com
image.fr.chiesi.com
image.ggef2.email
image.info.bbvaspark.com
image.info.chimi-online.com
image.info.lacompagnie.com
image.laingsuk.com
image.link.thepetstable.com
image.lp.volkswagen.pt
image.lp.volkswagen-comerciais.pt
image.lta-tennisfoundation.com
image.mail.aliaserviziambientali.it
image.mail.antena3.com
image.mail.cewe.ch
image.mail.cewe.fr
image.mail.coraphotos.cewe.fr
image.mail.danonenutriciacampus.org
image.mail.fotoparadies.de
image.mail.lasexta.com
image.mail.milkandmore.co.uk
image.mail.stellantis-finance.fr
image.mail.stellantis-finance.nl
image.mail.stellantisfinancialservices.co.uk
image.mail.virtuagym.com
image.marketing.forini.com
image.marketing.kinto-mobility.it
image.members.myaudiworld.sg
image.mktg.fratelligiacomel.it
image.news.yves-rocher.de
image.nexo.com
image.notifications.seat.com
image.pss2.basf.com
image.r20230315.s50.sfmc-tlsprovisioning.com
image.retail-media.coop.ch
image.service.aerzteversicherung.de
image.sf.videndummediasolutions.com
image.sfmarkcloud.valtech.com
image.stellantis-me.com
image.us-ag.basf.com
image.videvo.net
image.wepik.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-16-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQCDCCDvCgAwIBAgIQBx1MYvyw2OGnyvh9FansGTANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjMx
MjExMDAwMDAwWhcNMjUwMTEwMjM1OTU5WjCBjjELMAkGA1UEBhMCVVMxEzARBgNV
BAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoT
FFNhbGVzZm9yY2UuY29tLCBJbmMuMTMwMQYDVQQDEypzYW4tMTYtczUwLnRsc3By
b3Zpc2lvbmluZy5leGFjdHRhcmdldC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCHSDQQmrJSSaYhslzbiEhqL/Uxxe5oa9h5RW/WcsmzW8ccSyaa
iA7TBE0R1eFPvtG9Y7I2cx3KfIXwLcEu3XklR7nuLKUJZxN/YF4OOLylOYK3ZK0Z
jlRYHKe9xJLT8jkY9vt66Pl2bXUihejkgrS2vhuBM5DTzFEqa2Mbbkrs0pdzEy9g
tIojkzsTFEBxVsBhOzPb70mM1YvPqFPa1uljj1dpA/m6FT/Sfjs/kI0UqnY5Q6gb
GQ7eGoafhjN7HTPkePxRhSGi1qpwIOw8KmQYdseqVS4D4XVFcP7ymvwzY0Fid9+2
ZoW2rlfkFpSKvjyw/mB7t+PhFRnzkXzsiS1pAgMBAAGjggyUMIIMkDAfBgNVHSME
GDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQULCClZT/k07ksGGtP
ZQjsnrY/ZGYwggqOBgNVHREEggqFMIIKgYIqc2FuLTE2LXM1MC50bHNwcm92aXNp
b25pbmcuZXhhY3R0YXJnZXQuY29tghdpbWFnZS5hZHYuZ2FsdmFuaW5hLmNvbYIR
aW1hZ2UuYWlyYnAuZW1haWyCG2ltYWdlLmJhdWVyZmVpbmQtc3BvcnRzLmNvbYIg
aW1hZ2UuY2NwLmNsaWVudGNhcmVwbGF0Zm9ybS5jb22CFGltYWdlLmNlZS5jaGll
c2kuY29tgiJpbWFnZS5jbGllbnQuZm95ZXJnbG9iYWxoZWFsdGguY29tgh9pbWFn
ZS5jb21tdW5pY2F0aW9uLmNhcmdsYXNzLmZygh9pbWFnZS5jb211bmljYWNpb24u
aHVlbHZhMjQuY29tgidpbWFnZS5jb211bmljYWNpb24uc3RlbGxhbnRpc2ZpbmFu
Y2UuZXOCH2ltYWdlLmNvbXVuaWNhemlvbmUuaXN5YmFuay5jb22CHmltYWdlLmNv
bm5lY3QuZm91ci1wYXdzLm9yZy5hdYIcaW1hZ2UuY29udGFjdC5tb2JpbGl6ZS1m
cy5wbIIeaW1hZ2UuY29udGFjdC5tb2JpbGl6ZS1wYXkuY29tgiBpbWFnZS5jb250
ZW50LmJhY2FyZGlsaW1pdGVkLmNvbYIYaW1hZ2UuY29udGVudC5kZXdhcnMuY29t
gh9pbWFnZS5jb3JlLW5ld3MueXZlcy1yb2NoZXIuY29tghRpbWFnZS5jcm0ud2l0
cy5hYy56YYIgaW1hZ2UuZGUubmVzdGxlaGVhbHRoc2NpZW5jZS5jb22CHGltYWdl
LmRlbnRlbGxpLnF1bm9zdWl0ZS5jb22CFWltYWdlLmRlcHRzdHVkaW9zLmNvbYIU
aW1hZ2UuZS5keXNvbi5jb20uc2eCFGltYWdlLmUuZHlzb24uY29tLnRyghBpbWFn
ZS5lLmR5c29uLmlugh1pbWFnZS5lLmhvbGlkYXlkaXNjb3VudGVyLmNvbYIWaW1h
Z2UuZW0uYXQubGVhc3lzLmNvbYIWaW1hZ2UuZW0uYmUubGVhc3lzLmNvbYIWaW1h
Z2UuZW0uZGUubGVhc3lzLmNvbYIWaW1hZ2UuZW0uZXMubGVhc3lzLmNvbYIWaW1h
Z2UuZW0uZnIubGVhc3lzLmNvbYITaW1hZ2UuZW0uam9pbnJzLmNvbYIWaW1hZ2Uu
ZW0ubmwubGVhc3lzLmNvbYIWaW1hZ2UuZW0ucGwubGVhc3lzLmNvbYIWaW1hZ2Uu
ZW0ucHQubGVhc3lzLmNvbYIWaW1hZ2UuZW0udWsubGVhc3lzLmNvbYIVaW1hZ2Uu
ZW1haWwuYWJhY3VzLmVzghRpbWFnZS5lbWFpbC5hLWh1cy5zZYIZaW1hZ2UuZW1h
aWwuYWxnZWFjYXJlLmNvbYIUaW1hZ2UuZW1haWwuY2VhYy5jb22CF2ltYWdlLmVt
YWlsLmNldGFwaGlsLmNhgh9pbWFnZS5lbWFpbC5jbGluaWNhZGlhZ29uYWwuY29t
gidpbWFnZS5lbWFpbC5kZW50YXBvaW50aW50ZXJuYXRpb25hbC5jb22CFWltYWdl
LmVtYWlsLmRlcm9tZS5zZYIfaW1hZ2UuZW1haWwuZGV1c3RvZm9ybWFjaW9uLmNv
bYIbaW1hZ2UuZW1haWwuZGV1c3Rvc2FsdWQuY29tgh1pbWFnZS5lbWFpbC5kaXN0
cmV0dG9sYWdoaS5pdIIbaW1hZ2UuZW1haWwuZ3JhbmRvcHRpY2FsLnB0ghtpbWFn
ZS5lbWFpbC5tdWx0aW9wdGljYXMucHSCHGltYWdlLmVtYWlsLm15aGFpcm1lZGlj
YWwuZGWCHGltYWdlLmVtYWlsLm5vcmRpY2hvdGVscy5jb22CGWltYWdlLmVtYWls
LnN0cmF3YmVycnkubm+CFWltYWdlLmVtYWlsLnRpY2luby5jaIIcaW1hZ2UuZW1h
aWwudHVyaXNtb25vdmFyYS5pdIIXaW1hZ2UuZW1haWwudmFpbGxhbnQuZGuCGWlt
YWdlLmVtYWlscy5kb2dzdHJ1c3QuaWWCE2ltYWdlLmVzLmNoaWVzaS5jb22CE2lt
YWdlLmZyLmNoaWVzaS5jb22CEWltYWdlLmdnZWYyLmVtYWlsghhpbWFnZS5pbmZv
LmJidmFzcGFyay5jb22CG2ltYWdlLmluZm8uY2hpbWktb25saW5lLmNvbYIaaW1h
Z2UuaW5mby5sYWNvbXBhZ25pZS5jb22CEmltYWdlLmxhaW5nc3VrLmNvbYIbaW1h
Z2UubGluay50aGVwZXRzdGFibGUuY29tghZpbWFnZS5scC52b2xrc3dhZ2VuLnB0
giFpbWFnZS5scC52b2xrc3dhZ2VuLWNvbWVyY2lhaXMucHSCHmltYWdlLmx0YS10
ZW5uaXNmb3VuZGF0aW9uLmNvbYIjaW1hZ2UubWFpbC5hbGlhc2Vydml6aWFtYmll
bnRhbGkuaXSCFmltYWdlLm1haWwuYW50ZW5hMy5jb22CEmltYWdlLm1haWwuY2V3
ZS5jaIISaW1hZ2UubWFpbC5jZXdlLmZygh1pbWFnZS5tYWlsLmNvcmFwaG90b3Mu
Y2V3ZS5mcoIjaW1hZ2UubWFpbC5kYW5vbmVudXRyaWNpYWNhbXB1cy5vcmeCGmlt
YWdlLm1haWwuZm90b3BhcmFkaWVzLmRlghZpbWFnZS5tYWlsLmxhc2V4dGEuY29t
ghxpbWFnZS5tYWlsLm1pbGthbmRtb3JlLmNvLnVrgiBpbWFnZS5tYWlsLnN0ZWxs
YW50aXMtZmluYW5jZS5mcoIgaW1hZ2UubWFpbC5zdGVsbGFudGlzLWZpbmFuY2Uu
bmyCLGltYWdlLm1haWwuc3RlbGxhbnRpc2ZpbmFuY2lhbHNlcnZpY2VzLmNvLnVr
ghhpbWFnZS5tYWlsLnZpcnR1YWd5bS5jb22CGmltYWdlLm1hcmtldGluZy5mb3Jp
bmkuY29tgiFpbWFnZS5tYXJrZXRpbmcua2ludG8tbW9iaWxpdHkuaXSCHGltYWdl
Lm1lbWJlcnMubXlhdWRpd29ybGQuc2eCHmltYWdlLm1rdGcuZnJhdGVsbGlnaWFj
b21lbC5pdIIZaW1hZ2UubmV3cy55dmVzLXJvY2hlci5kZYIOaW1hZ2UubmV4by5j
b22CHGltYWdlLm5vdGlmaWNhdGlvbnMuc2VhdC5jb22CE2ltYWdlLnBzczIuYmFz
Zi5jb22CLGltYWdlLnIyMDIzMDMxNS5zNTAuc2ZtYy10bHNwcm92aXNpb25pbmcu
Y29tghppbWFnZS5yZXRhaWwtbWVkaWEuY29vcC5jaIIjaW1hZ2Uuc2VydmljZS5h
ZXJ6dGV2ZXJzaWNoZXJ1bmcuZGWCI2ltYWdlLnNmLnZpZGVuZHVtbWVkaWFzb2x1
dGlvbnMuY29tgh1pbWFnZS5zZm1hcmtjbG91ZC52YWx0ZWNoLmNvbYIXaW1hZ2Uu
c3RlbGxhbnRpcy1tZS5jb22CFGltYWdlLnVzLWFnLmJhc2YuY29tghBpbWFnZS52
aWRldm8ubmV0gg9pbWFnZS53ZXBpay5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgIw
KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1Ud
HwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0
R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3JsMEigRqBEhkJodHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIw
MjBDQTEtMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEt
MS5jcnQwDAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAMhR2o29XHbKKzTe01eqoxG8rxlYDejf9oYtuo+s3eRGWM1pJ
AY+5lveMWfEhXl8HPjtbmGxpcq9ldsKoqX9k1w0Bp+3BLNfGxa5DtBH6J/kHIDt9
qWfFQtSndsmskbraYwkgSYi5K9iwKhcE5PBDZKqG3f/NKxNZM9sHuhhJduUvP6Nr
+PoRHhAXCXDcAXYqPUHX6qbiyhHhZtsbjnM1WwiUiHYnyH1abQXBhqCIvwgDUePu
dsUooVrf9ZWNYRmvTMsS+3+v3qOseSGVS5oERPH4xdyFhCWFFrWjBirLGAD3B+Q3
Ta5PxUh18hPBs2uJKsDSoaw1LXTfwW3CcJD08g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0g0EJqyUkmmIbJc24hI
ai/1McXuaGvYeUVv1nLJs1vHHEsmmogO0wRNEdXhT77RvWOyNnMdynyF8C3BLt15
JUe57iylCWcTf2BeDji8pTmCt2StGY5UWBynvcSS0/I5GPb7euj5dm11IoXo5IK0
tr4bgTOQ08xRKmtjG25K7NKXcxMvYLSKI5M7ExRAcVbAYTsz2+9JjNWLz6hT2tbp
Y49XaQP5uhU/0n47P5CNFKp2OUOoGxkO3hqGn4Yzex0z5Hj8UYUhotaqcCDsPCpk
GHbHqlUuA+F1RXD+8pr8M2NBYnfftmaFtq5X5BaUir48sP5ge7fj4RUZ85F87Ikt
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9456721885085742649410935821070625817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-16-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17077775983297399672058116492756180854958099964543513246791091799247815678488945852437168690167245357249090040374222441055045584766062777708411133459704041737322355423017479730707092394205395420286041503660618455732221995517338797524494429898859631303572504511814213286063790958034917507238436837170846980128400374743643417462097441961705116221390119699128153620488212871208815707248733557440032692705970564910393215386132196638055217271880531517205671995727987618865102852719423943814053930911367096612577032897611271677622738236118833422897111503087951117745900324307105955281068073374593530477169634991412901129577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c20a5653fe4d3b92c186b4f6508ec9eb63f6466
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2693 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-16-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.adv.galvanina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.airbp.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bauerfeind-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ccp.clientcareplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cee.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.client.foyerglobalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.carglass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.huelva24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.stellantisfinance.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazione.isybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.four-paws.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-pay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.bacardilimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.dewars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.core-news.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.wits.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.de.nestlehealthscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dentelli.qunosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.deptstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.holidaydiscounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.at.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.be.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.de.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.es.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.fr.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.joinrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.nl.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.pl.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.pt.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.uk.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.abacus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.a-hus.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.algeacare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ceac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cetaphil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clinicadiagonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dentapointinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.derome.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.deustoformacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.deustosalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.distrettolaghi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.grandoptical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.multiopticas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.myhairmedical.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nordichotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.strawberry.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ticino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.turismonovara.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vaillant.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.dogstrust.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.es.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fr.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ggef2.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bbvaspark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.chimi-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lacompagnie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.laingsuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.thepetstable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.volkswagen.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.volkswagen-comerciais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lta-tennisfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.aliaserviziambientali.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.antena3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cewe.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cewe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.coraphotos.cewe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.danonenutriciacampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fotoparadies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lasexta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.milkandmore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stellantis-finance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stellantis-finance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stellantisfinancialservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.virtuagym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.forini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.kinto-mobility.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.myaudiworld.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.fratelligiacomel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notifications.seat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pss2.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r20230315.s50.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.retail-media.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.aerzteversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.videndummediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmarkcloud.valtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.stellantis-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-ag.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.videvo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wepik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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