akamai-san76.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:80:7f:e4:7c:4b:60:f2:fc:c8:94:12:88:1a:93:33 was issued on by DigiCert Inc.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:80:7f:e4:7c:4b:60:f2:fc:c8:94:12:88:1a:93:33
Serial Number (int): 8642575941109938672114837054597796659
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 31:d6:2b:20:ca:fe:69:0f:de:af:fe:5f:12:3d:49:4b:39:ea:2b:63
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 37:af:7c:e9:fc:9e:b6:f7:fa:1f:61:ef:10:65:c4:5c:9a:e2:e4:30
Fingerprint (sha256): 16:f0:62:2e:e8:34:e5:45:7b:ea:d3:54:d1:00:eb:19:6a:ac:db:a0:24:ac:40:cd:c5:38:9d:9a:77:33:3f:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate akamai-san76.exacttarget.com

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akamai-san76.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akamai-san76.exacttarget.com
image.vvaa-mailing.nl
image.aacr-outbound.com
image.mywelldyne.com
image.wwmarquis.com
image.blgrnvacations.com
image.e.vipmobile.rs
image.contact.thealchemistatelier.com
image.members.sats.se
image.mail.connectionsacademy.com
image.emdeals.michaels.com
image.news.edel.com
image.sf.longandfoster.com
image.members.hiyoga.no
image.info.nextep.com
image.marketingcloud.atfx.com
image.e.eatstreet.com
image.mail.ts3card.com
image.mail.lexus-fs.jp
image.members.sats.com
image.uat.mail.citibank.ru
image.uat.indiacommunications.citi.com
image.uat.email.citibank.ae
image.support.bualuang.co.th
image.m.georgeandmatilda.com.au
image.e.truealliance.com.au
image.uat.email.citibank.com.bh
image.uat.email.citibank.com.tw
image.uat.notifications.dinersclub.com.au
image.uat.notifications.cardservicesdirect.com.au
image.uat.email.citibank.com.my
image.uat.mail.citibank.com.pl
image.uat.mail.citibank.co.uk
image.uat.email.citibank.co.id
image.uat.notifications.boq.cardservicesdirect.com.au
image.uat.notifications.racq.cardservicesdirect.com.au
image.uat.notifications.secure.coles.com.au
image.uat.notifications.suncorp.cardservicesdirect.com.au
image.uat.email.ipb.citibank.com.sg
image.uat.notifications.cards.koganmoney.com.au

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for akamai-san76.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwNGtoJ4lNGeT4ERKxA
RJVTemUX/0FlK9NOsBXw6+kdvib2mfoDZDfF8k3T2xdC7Lyg++Nna3NxQsTXwHBm
mEbUT8iLqrNyhqmhQbqc68ID+wWINTzAr5qZdN382W/5URfBSeNHlfGc2cSUJLL7
NEuaVAm220UmVYom7nvssq9BqYZzNtRGj/NCSJJjnSitncrCwpBgMRXTezL00l/R
pUnZyRPGIDORJQCKr9iiHeYiNbBfM6Q6NAYdMM62NX85r1gFVAXl1meuJkeLrIfR
47KaDeKUyKNJ9kyDMAIoTMuEO9CUw0rLlDiMrRxH4XtLgQt5RFjWsjIxGqyYqAdx
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8642575941109938672114837054597796659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akamai-san76.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22365902430868834611863029960865749427693385568328464134309907365486096649901444236493952529710479304475135773380281667163294885001738724051702833336066228739947162524493134514300603732915773535982543148308698024439051355229952565721668491664662501998002045773406977047974815675319651295565556457833321931423739341554079426197142631238026988567130915680508594414195656746054928271509601152935014077818356264597263615547115085979476090052974847122524351461260846945640156835067985436057611898174129899222641819910606689623165939259167865114843263396384913093054666848176607609810390915751002354898897258800444252582209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31d62b20cafe690fdeaffe5f123d494b39ea2b63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai-san76.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vvaa-mailing.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.aacr-outbound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mywelldyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wwmarquis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.blgrnvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vipmobile.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.thealchemistatelier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.sats.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.connectionsacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emdeals.michaels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.edel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.longandfoster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.hiyoga.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.nextep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingcloud.atfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.eatstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ts3card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lexus-fs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.sats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.mail.citibank.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.indiacommunications.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.email.citibank.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.support.bualuang.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.georgeandmatilda.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.truealliance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.email.citibank.com.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.email.citibank.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.dinersclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.cardservicesdirect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.email.citibank.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.mail.citibank.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.mail.citibank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.email.citibank.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.boq.cardservicesdirect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.racq.cardservicesdirect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.secure.coles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.suncorp.cardservicesdirect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.email.ipb.citibank.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uat.notifications.cards.koganmoney.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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