san-35-s12.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:3f:32:c2:6a:58:a0:37:52:f8:a5:89:75:4e:a4:d1 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:3f:32:c2:6a:58:a0:37:52:f8:a5:89:75:4e:a4:d1
Serial Number (int): 17608108170947863951525161927068001489
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 84:65:81:f9:1b:8e:3c:2f:6d:25:b6:58:59:d2:2d:78:9f:ff:12:d7
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 10:d8:b4:d0:78:73:3c:5e:fa:92:e5:c1:8a:0e:c4:11:5b:d9:5b:45
Fingerprint (sha256): 13:8b:2d:1e:92:60:a3:a9:39:a3:5c:82:86:23:36:39:85:6e:f6:ad:dc:a7:cb:43:34:49:4a:be:d6:be:55:f4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-35-s12.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-35-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-35-s12.tlsprovisioning.exacttarget.com
image.advancement.luc.edu
image.advise.usc.edu
image.arches.goodfeet.com
image.awesomedifferent.offerpad.com
image.comms.expediagroup.com
image.communication.tiffany.com
image.communications.sundarammutual.com
image.correo.walmart.co.cr
image.crmmkt.bbseguros.com.br
image.e.charlottefootballclub.com
image.e.lincolnfinancial.com
image.e.mdanderson.org
image.e.metcash.com
image.e.unidas.com.br
image.e1.llbean.co.jp
image.em.digitalmouth.com
image.em.nelnetenergy.com
image.email.bcbsnd.com
image.email.bylinebank.com
image.email.chateaustjean.com
image.email.churchome.org
image.email.clevelandgolf.com
image.email.crankyhealth.com.au
image.email.dougburgum.com
image.email.goredpatriot.com
image.email.integrityleadcenter.com
image.email.line-pharma.ca
image.email.mhw.cl
image.email.mousik.com
image.email.planenroll.com
image.email.shoestation.com
image.email.srixon.com
image.email.sune.live
image.email.theladyshake.com
image.email.themanshake.com
image.email.tvsmotor.com
image.email.vebaonline.com
image.email.xxiousa.com
image.email.zkipster.com
image.emails.tvsemerald.com
image.fm.firstmedia.id
image.global-mail.um.edu.uy
image.hello.globalpremierfertility.com
image.i.unifasttrack.com
image.imwithroger.org
image.info.eskenazihealth.edu
image.info.fly2houston.com
image.info.globalalumni.org
image.info.homevestors.com
image.info.keydeliveryio.com
image.info.muirwoodteen.com
image.info.redswag.com
image.info.sdas.sg
image.inovyo.cx
image.m.allianceforsafetyandjustice.org
image.m.fcma.com
image.m.rural1st.com
image.mail.7veinte.cl
image.mail.benditocacaoresort.com.br
image.mail.bossplow.com
image.mail.brigaderia.com.br
image.mail.farmsanctuary.org
image.mail.greaterpacificsolutions.com
image.mail.hushpuppieskids.cl
image.mail.isoc.org
image.mail.norseg.cl
image.mail.soldierstosidelines.org
image.mail.trudel.ca
image.mail.vans.cl
image.marketing.miaxglobal.com
image.marketing.navyfederal.org
image.marketing.signaturetravelnetwork.com
image.mc.springerequipment.com
image.mcparks.virginiabeach.gov
image.mkt.qrsportsholidays.com
image.mkt.sensebike.com.br
image.news.solinftec.com
image.news.zyla.com
image.notifications.tas.gov.au
image.onemovementusa.com
image.peerlessemail.homeserviceapt.com
image.peoplesemail.homeserviceapt.com
image.puntocommerce.marketing
image.r2-20230526-1.s12.sfmc-tlsprovisioning.com
image.revelareemail.homeserviceapt.com
image.ridgetopemails.homeserviceapt.com
image.send.ameripac.org
image.simedarbymotors.sg
image.siremail.homeserviceapt.com
image.solutions.masterword.com
image.tmobiz.t-mobile.com
image.victoryredpatriot.com
image.wmt.worldmarkettitans.com
image.wwemail.homeserviceapt.com
image.zingasemail.homeserviceapt.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-35-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RZDz9Zo6sunYb7JtcZO
8puM2JAq0PCFIhudO1hX1UEGH455+NsZjOR8lHcGUo1VMT0YhHUHtOPlv/e1E3J1
JlCyTKP99U5w7UZl9ykarAe4ZhS2ySqcOva3In+WZaLOtahOhl43zNcKd7km720D
wOw7+FcUxMoH2VWjefYLUwCA2tLcjbPXLzzeHiUmx88gexE1kEHkh0W9YSx+JD0g
WOAB4qpETsRIx6KYD3XiH8p53ZEn35jFy9zuNqlX8sRp6q5wLA17eeahvUmavUuD
lMD61AY6mkt+yy1ItyMAmZA8bOor94YSVlg7RX5UhTTWdGIxeQC28L8Sz0rH2wCG
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17608108170947863951525161927068001489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-35-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28919551063736695077888254138174593606167319453984463794155696222158074201184912458509215879140628171661095826639766757822781831878244675242813323551463679260898650595948753761521984011646858993128587457731428211777720897239273440579843348589788171548538495606842668071249263830132862432022535203265021547718719445208401735081375383023062193136576573832324534073462936838570222046468187200943071544911468379814866549531232508419071769021084993815927975104161078106923332747334778855704259442436882858478967564090818790755116750909905398204655118257168112890032067103374282231504140903242637711882501921405563090011857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							846581f91b8e3c2f6d25b65859d22d789fff12d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2828 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-35-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advancement.luc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advise.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.arches.goodfeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.awesomedifferent.offerpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.expediagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.sundarammutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.walmart.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crmmkt.bbseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.charlottefootballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.lincolnfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mdanderson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.metcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.unidas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e1.llbean.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.digitalmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.nelnetenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bcbsnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bylinebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chateaustjean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.churchome.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clevelandgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.crankyhealth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dougburgum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.goredpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.integrityleadcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.line-pharma.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mhw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mousik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.planenroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shoestation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.srixon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sune.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.theladyshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.themanshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tvsmotor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vebaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.xxiousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.zkipster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.tvsemerald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fm.firstmedia.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global-mail.um.edu.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.globalpremierfertility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.unifasttrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.imwithroger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.eskenazihealth.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fly2houston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.globalalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.homevestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.keydeliveryio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.muirwoodteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.redswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.sdas.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.inovyo.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.allianceforsafetyandjustice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.fcma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.rural1st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.7veinte.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.benditocacaoresort.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bossplow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.brigaderia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.farmsanctuary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.greaterpacificsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppieskids.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.isoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.norseg.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.soldierstosidelines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.trudel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vans.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.miaxglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.navyfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.signaturetravelnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.springerequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mcparks.virginiabeach.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.qrsportsholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.sensebike.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.solinftec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.zyla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notifications.tas.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.onemovementusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.peerlessemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.peoplesemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.puntocommerce.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r2-20230526-1.s12.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.revelareemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ridgetopemails.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.send.ameripac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.simedarbymotors.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.siremail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.solutions.masterword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tmobiz.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.victoryredpatriot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wmt.worldmarkettitans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wwemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.zingasemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e4ef685bd0000040300483046022100e42d338e939e286e2d990224ed489b343b15c97624dea89bf00517ed9290e6bb022100885897aecdd20619a7d7dd55796137236aeb6a4207e8495ec7782351a5eacc5a0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018e4ef6862e00000403004730450220391d1e034d955efbb46d4e24e3a268ad69a52ed3069584f816df78d14548a6e4022100bac564124c38ee61ef3441b802baf3d6cea18595c3dcb38b4582e5ef551cd3fe007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e4ef6861b0000040300463044022004642965f60864b82f5140be3675e3143f77a5b0ccbdeb83a82e536b3755290002207c5c889222ab8074d8d8963af90f18558d69db48aa7c2c7b7bb5c8f64f149da3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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