san-8-s7.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:b9:2e:b2:d9:5c:95:6b:b3:31:82:c9:7b:7e:e7:b8 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:b9:2e:b2:d9:5c:95:6b:b3:31:82:c9:7b:7e:e7:b8
Serial Number (int): 2290750075338728426029776775497574328
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a6:27:43:80:2f:14:35:c7:05:f3:dc:c6:b7:b1:d9:ce:53:4b:9b:0d
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): dc:94:56:e8:43:2e:d4:14:38:3d:c7:f1:40:0f:98:2e:4c:0b:bd:fb
Fingerprint (sha256): 17:3b:af:04:12:6c:06:32:00:84:a8:4b:33:6c:98:e6:8d:0e:02:fd:fd:5d:fa:d8:54:22:3b:93:fb:f9:4a:57

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-8-s7.tlsprovisioning.exacttarget.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-8-s7.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-8-s7.tlsprovisioning.exacttarget.com
image.aspac.jnjmedtech.com
image.c.budlight.com
image.c.busch.com
image.c.nutrlusa.com
image.careadvisorconnect.optum.com
image.ccb10.citi.com
image.comm.housingpartnership.net
image.communications.truterraag.com
image.connect.commissaries.com
image.dcnd.mapfre.com
image.devmcgill.marketing
image.dev-message.viarail.ca
image.e.farmers.co.nz
image.e.iiqual.com
image.e.nestlebaby.ca
image.e.proplanvetdirect.com
image.e.purinaprofessionalexchange.com
image.e.superloop.com
image.ecampaigns.therecroom.com
image.eemea.ecamp.roche.com
image.em.wcs.org
image.email.amerantbank.com
image.email.beretta.com
image.email.biopharmcommunications.com
image.email.cph.dk
image.email.dgfs.dk
image.email.elephant.com
image.email.eveonline.com
image.email.fundacionmapfrecanarias.com
image.email.jacquie.com.au
image.email.jayjays.com.au
image.email.jgl.com.au
image.email.justflyemail.com
image.email.justjeans.com.au
image.email.mapfre.com
image.email.myflighthub.com
image.email.mygemma.com
image.email.peteralexander.com.au
image.email.portmans.com.au
image.email.smiggle.com.au
image.email.vocabulary.com
image.email.yarrow.org
image.emails.acerentalcars.com.au
image.emails.houseoftravel.co.nz
image.emails.jaguar-landrover.co.uk
image.emea.jnjmedtech.com
image.enviosemail.carrefour.es
image.flourish-email.com
image.fr.mail.elanco.com
image.info.brighthorizons.com
image.institute.caringeveryday.asia
image.jp.mail.elanco.com
image.latam.jnjmedtech.com
image.m.invistaspiti.com.br
image.ma.toyotahome-tokyo.com
image.mail.armani-beauty.ca
image.mail.biotherm.ca
image.mail.biotherm-usa.com
image.mail.bluetriton.com
image.mail.itcosmetics.ca
image.mail.lancome.ca
image.mail.laroche-posay.ca
image.mail.mapfre.com
image.mail.mapfreseguros.com.py
image.mail.matrixprofessional.ca
image.mail.oprimorico.com.br
image.mail.portfel.com.br
image.mail.redken.ca
image.mail.skinceuticals.ca
image.mail.sportmax.com
image.mail.staage.com
image.mail.urbandecay.ca
image.mail.vichy.ca
image.mail.vocemaisrico.com
image.mail.yslbeauty.ca
image.mail2.zocdoc.com
image.marketaccess.abbott.com
image.mc.livable.jp
image.mkt.heineken.com.br
image.mktg.intrepiddirect.com
image.myef.easyfairs.com
image.na.jnjmedtech.com
image.news.cravanparis.com
image.news.garnier.co.id
image.news.laroche-posay.me
image.news.nestle.ca
image.news-uat.moethennessy.com
image.northamerica.chevronbusiness.com
image.notify.precept.org

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-8-s7.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gcb/hEMST1lti/LCkxk
hsLjq0ne2hoopAzxhCob4Bu4G98r75N9I5hyBx1n5wg0BSMnMRihscs3g+72Sgnc
snnrCafTBznhVxR3KKdyIHd+M1lRX088hGOzkkOkS/vLKBLV54MMz5CjmUQydfBN
ijv6AkNkVewm3P3yLiX91jiKAE89ElPKQIeL9AXl6LvdxRSuHw6O4wCNjapPMEs6
BUkOOFlfJysjeURkku3zTXCpbv3Etm2stfuQyjnGG4qT6/HW/RFfZbReaA7L/WS9
+GoyF3pbkFynMfRirROkoDKhGcQzNaANzei1iCJfQg1KXnXCV1hKgKLOkpzRC/QS
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2290750075338728426029776775497574328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-8-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26513549791798703145138821028009622297946756433100976024879327976827907422854285385239218102940106371517509683725527918376388816990903515223875795905021933152886521020722423079300766080527347725367202778197401409325196568185547790201588849716033631022230955948844983630604237026349874770776403564784826767565465250634402505943491998111290469833492645892424019466545618862980954655720025690768292461510243383602011318195961773249139716013153488725668549708862931111691962607086540616299244711388847471951453156992808939033482735989728124216462306395267343496832744683111951555311093974096272415560399010170300727038641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a62743802f1435c705f3dcc6b7b1d9ce534b9b0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-8-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.aspac.jnjmedtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.budlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.busch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.nutrlusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.careadvisorconnect.optum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ccb10.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comm.housingpartnership.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.truterraag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.commissaries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dcnd.mapfre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.devmcgill.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dev-message.viarail.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.farmers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.iiqual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.nestlebaby.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.proplanvetdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.purinaprofessionalexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.superloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ecampaigns.therecroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eemea.ecamp.roche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.wcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.amerantbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.beretta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.biopharmcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cph.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dgfs.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.elephant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eveonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fundacionmapfrecanarias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jacquie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jayjays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jgl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.justflyemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.justjeans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mapfre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.myflighthub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mygemma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.peteralexander.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.portmans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.smiggle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vocabulary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.yarrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.acerentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.houseoftravel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.jaguar-landrover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emea.jnjmedtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enviosemail.carrefour.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.flourish-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fr.mail.elanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.brighthorizons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.institute.caringeveryday.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jp.mail.elanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.latam.jnjmedtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.invistaspiti.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.toyotahome-tokyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.armani-beauty.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.biotherm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.biotherm-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bluetriton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.itcosmetics.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lancome.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.laroche-posay.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mapfre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mapfreseguros.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.matrixprofessional.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.oprimorico.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.portfel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.redken.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.skinceuticals.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.sportmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.staage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.urbandecay.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vichy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vocemaisrico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.yslbeauty.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail2.zocdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketaccess.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.livable.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.heineken.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.intrepiddirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.myef.easyfairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.na.jnjmedtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cravanparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.garnier.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.laroche-posay.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.nestle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news-uat.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.northamerica.chevronbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notify.precept.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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