san-34-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:17:41:69:4c:a1:b4:2e:25:ca:00:92:58:cd:a8:70 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:17:41:69:4c:a1:b4:2e:25:ca:00:92:58:cd:a8:70
Serial Number (int): 18729941468032773293062818153188141168
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:d0:b2:71:0a:dd:73:17:f3:7e:64:86:c8:07:e2:68:f0:d8:bb:8a
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 96:24:3d:89:98:a0:fa:fc:d8:b8:a3:e9:99:ed:37:58:4b:19:52:d9
Fingerprint (sha256): 13:12:ad:89:05:42:43:2e:04:d6:0a:80:21:e8:3e:b9:f8:ba:9d:20:36:a5:f3:75:5a:18:48:33:fe:79:c5:da

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-34-s12.tlsprovisioning.exacttarget.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-34-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-34-s12.tlsprovisioning.exacttarget.com
image.email.alumni.uga.edu
image.usvmarketing.in
image.conteudo.midiabanco24horas.com.br
image.email.thriveworks.com
image.rubisrewards.cstoresavings.com
image.mc.powerproducts.biz
image.c.family-sales.jp
image.email.surge.com.au
image.contacto.pits2go.com
image.email.forus.cl
image.email.patriotredalert.com
image.email.shoplainelondon.com
image.m-update.marriott.com
image.nchcconnect.org
image.uss.unclesamsecrets.com
image.email.betdeluxe.com.au
image.email.betnation.com.au
image.m.mitsui-direct.co.jp
image.edm.samsonite.in
image.email.perceptionsuite.com
image.engage.pcna.com
image.mylotc.com
image.lgecanada.ca
image.ma.vitanote.jp
image.info.jnbank.co.uk
image.communications.uniteddigestive.com
image.email.uwgt.org
image.enews.united.com
image.mihometownrewards.cstoresavings.com
image.communications.vas.edu.vn
image.edm.americantourister.com.my
image.edm.americantourister.com.ph
image.engage.allennext.com
image.m.hs-ocean.com
image.email.dunlopsports.com
image.web.ccrmivf.com
image.mkt.monacostarevents.com
image.mkt.sportsnetholidays.com
image.comms.jeld-wen.ca
image.communications.lacantinadoors.com
image.e.hisense-europe.com
image.maillink.colehaan.com
image.e.echt.com.au
image.hospitality.stjoe.com
image.pearl.stjoe.com
image.wci.stjoe.com
image.wsi.stjoe.com
image.e.airmedscrubs.com.au
image.email.lula.com
image.email.vetter.tec.br
image.mail.underarmour.cl
image.comms-nike.com
image.communications.xcledu.my
image.crm.bellehaven.com
image.mail.landers.ph
image.lafayettesquare.com
image.crm.cruzeiro.com.br
image.horizant.azurity.com
image.medicationtransformed.azurity.com
image.myrewards.cstoresavings.com
image.triptodur.azurity.com
image.adthyza.azurity.com
image.notificacoes.nestleatevoce.com.br
image.email.mobilehealthconsumer.com
image.novidades.portoseguro.com.br
image.email.hellohiloeats.com
image.e.fentonandfenton.com.au
image.edarbi.azurity.com
image.marketing.hjb.com.mx
image.email.metamail.com
image.fala.caju.com.br
image.ccreek.stjoe.com
image.lodge30a.stjoe.com
image.cx.javeriana.edu.co
image.mc.virginiaaquarium.com
image.alencoemail.homeserviceapt.com
image.bordneremail.homeserviceapt.com
image.capitalemails.homeserviceapt.com
image.carefreeemail.homeserviceapt.com
image.cmeemail.homeserviceapt.com
image.edm.samsonite.com.ph
image.email.homeserviceapt.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-34-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWxnBxkrgWp8PNfra2Ei
DnGBcKICfDtBowCvKBNeuqQ7jZKjJ/HZuEdAW0/0DIJTdvVRpNpHFXLu1cxenYbh
EEkmf1NYMYnXgvT3VjTVmGLPXI1ql8n0UEgZIlV1j7FGFY2kXz/RIwY78vX4sffN
17QNZdK0vqK4fX86CO5NDd2uSEpMOUjzCAHthf2AjrTUVbpS4iUxuRqqrcnvhvia
vqOI+DyC3e9lrQsnsraMue7Ps9CF33imKUpBjbNL0maZLjLoixkW0n4GCVxYL+T+
BktLqKca98xV7BHpaTiM3c3XFGDyGoMzUQi/Ns5eMd1aH+rRA6EQLN6UMN2JM15f
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18729941468032773293062818153188141168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-34-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25427354539593572694986039859526580772740309178203375613441002548490162953396670818095349693389676180981902487309712254909540004948582307437961055910552182651921773457257103888750769365965534046871325787318252835047817256324709734605986493631112119704596780324073799556923400340824352264417183895818665157647138303051672929234172137299653294309159773621772388654179853074784601869606104619955594658866270135008377937559371805572094442327183192442098798701814908251421320498293771328678365305351918532023705880896958015443946103008356163045020116775636962180764355393472040167624474622307284152935048793869016090173273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0d0b2710add7317f37e6486c807e268f0d8bb8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-34-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.alumni.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.usvmarketing.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.midiabanco24horas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.thriveworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rubisrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.powerproducts.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.family-sales.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.surge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contacto.pits2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.forus.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.patriotredalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shoplainelondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m-update.marriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nchcconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uss.unclesamsecrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.betdeluxe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.betnation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.mitsui-direct.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.samsonite.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.perceptionsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.pcna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mylotc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lgecanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.vitanote.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.jnbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.uniteddigestive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.uwgt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enews.united.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mihometownrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.vas.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.americantourister.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.americantourister.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.allennext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.hs-ocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dunlopsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.ccrmivf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.monacostarevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.sportsnetholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.jeld-wen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.lacantinadoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hisense-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maillink.colehaan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.echt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hospitality.stjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pearl.stjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wci.stjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wsi.stjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.airmedscrubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vetter.tec.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.underarmour.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms-nike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.xcledu.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.bellehaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.landers.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lafayettesquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.cruzeiro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.horizant.azurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicationtransformed.azurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.myrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.triptodur.azurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.adthyza.azurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notificacoes.nestleatevoce.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mobilehealthconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidades.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.hellohiloeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fentonandfenton.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edarbi.azurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.hjb.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.metamail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fala.caju.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ccreek.stjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lodge30a.stjoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cx.javeriana.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.virginiaaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.alencoemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bordneremail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.capitalemails.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.carefreeemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cmeemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.samsonite.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.homeserviceapt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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