secure-uswe2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:19:3a:f0:15:76:a7:06:1b:c9:a5:7e:a1:e9:23:95 was issued on by DigiCert Inc.

With 106 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:19:3a:f0:15:76:a7:06:1b:c9:a5:7e:a1:e9:23:95
Serial Number (int): 13423282780471171840925134233644114837
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:0e:20:5c:a2:1a:2f:9e:ce:79:55:bc:e2:6b:05:35:4c:87:c9:22
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): bf:9c:38:8c:97:29:85:b4:d5:3c:7f:ec:39:f6:91:51:97:b1:b7:7b
Fingerprint (sha256): 19:c3:65:51:8d:34:74:a8:43:50:95:dd:be:64:55:ab:90:40:6d:a5:4f:bd:48:23:5a:f0:dd:06:5d:ac:ef:08

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure-uswe2-1.tessituranetwork.com

106

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-uswe2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tn.services
*.tnhs.cloud
tickets.balletaz.org
tickets.cupresents.org
support.arvadacenter.org
shop.youraga.ca
tickets.theaterworks.org
my.scottsdalemuseumwest.org
tickets.scottsdalearts.org
tickets.phoenixsymphony.org
tickets.phoenixtheatre.com
tickets.azscience.org
tickets.azopera.org
secure-uswe2-1.tessituranetwork.com
checkout.colburnschool.edu
ticketing.bravovail.org
tickets.theshedd.org
secure.act-sf.org
secure.foxtheaterspokane.org
secure.vancouversymphony.ca
tickets.calacademy.org
cart.sunsetcenter.org
order.acttheatre.org
secure.thesymphony.org
tickets.cerritoscenter.com
my.broadwaysacramento.com
secure.seattleartmuseum.org
tickets.coloradosymphony.org
tickets.coloradoballet.org
tickets.boisephil.org
my.lawrencehallofscience.org
secure.sfperformances.org
tickets.lensic.org
tickets.haletheater.org
cart.tixonthesquare.ca
naramptest.thanksgivingpoint.org
tickets.uccspresents.org
boxoffice.balletwest.org
shop.calgaryopera.com
my.winspearcentre.com
my.usuo.org
shop.artscommons.ca
cart.thanksgivingpoint.org
my.theatrecalgary.com
arttix.artsaltlake.org
boxoffice.santafesymphony.org
secure.santafechambermusic.com
secure.performancesantafe.org
my.operacolorado.org
subscription.magicspace.net
tickets.intermountainarts.org
tickets.edmontonopera.com
naramptest.californiasciencecenter.org
natest.seattleopera.org
my.montalvoarts.org
tickets.haughpac.com
tickets.philharmonicsociety.org
securesite.pcs.org
my.pasadenaplayhouse.org
order.pnb.org
tickets.orsymphony.org
my.lfjcc.org
checkout.lobero.com
securesite.lajollaplayhouse.org
wowfestival.lajollaplayhouse.org
purchase.lagunaplayhouse.com
purchase.groundlings.com
purchasing.sandiegosymphony.org
ticketing.granadasb.org
tickets.galloarts.org
store.ensembletheatre.com
my.artcenter.org
my.californiasciencecenter.org
secure.calperformances.org
purchase.broadwayrose.org
tickets.berkeleyrep.org
tickets.artistsrep.org
pst1.tessituranetwork.com
securesite.sdrep.org
secure.seattleopera.org
transaction.theconrad.org
cart.seattlesymphony.org
tickets.thesmithcenter.com
cart.lamiradatheatre.com
tickets.vancouveropera.ca
cart.pacificchorale.org
my.afi.com
tickets.lamasterchorale.org
ticketing.thetech.org
store.mopop.org
my.californiahistoricalsociety.org
tickets.hawaiiopera.org
secure.honolulumuseum.org
secure-tickets.berkeley.edu
tickets.ybca.org
purchase.worldofspeed.org
tickets.lutherburbankcenter.org
tickets.thewallis.org
tickets.mondaviarts.org
my.theatreworks.org
sto.stanfordtickets.org
www.stanfordlivetickets.org
www.stanfordjazztickets.org
my.moonlightstage.com
tickets.artsandlectures.ucsb.edu
naramptest.artsandlectures.ucsb.edu

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
tessituranetwork.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-uswe2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljmSz9QRkpjavZoArM6
Lfykhv52r9fwCMlOJeW3mAiUcLCBVD/fMsCGzQS36o7NtDVAsz6yY42MVLmdGXIh
Y6y4+HtCY7AFnX8ZeH5kC0qgF/8hhKL9LivgukU9ZnX+IE0ZIih6wy4vE9miux2r
+8AqtEL8V7mSF5/wOYGSWVnNwAks2Trgs9y67sVaAzkORL6nLmYLjXPZ+1B103g/
067CKriT1VZkVkVSCNnifWcINUqrLo5XQzmOW/gh4Vw+LBXBe4IOAD068hcnpRiU
FwYrX03Ag1s/CGYt0J64rUKzxBmaXB4MwS1is2uFX38BWQCzsP801JpTKIuR7xt8
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13423282780471171840925134233644114837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22514256303524067977795469780233512705505488429210718140007921531499719033898076386763174880967736964994991770702998079604921322941811058709981133097611589380858134603897247516518732131052868532046752599741014276817259181306868780554313944977794378863756213167406909268832354726197240172798863676488207305055648260858722181623230270243059130249101813770087755484779148993033199369029864283164027754165085292167566876432416104281910959205488850517220181487114742299616947364860615228514633523712083355188596029774075864727114176255551518599977199483060406513669768407916732983135631661328690345362878548267426238921849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e90e205ca21a2f9ece7955bce26b05354c87c922
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cupresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.arvadacenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.youraga.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theaterworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scottsdalemuseumwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.scottsdalearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.colburnschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.bravovail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theshedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.act-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foxtheaterspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouversymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.calacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sunsetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.acttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cerritoscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.broadwaysacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradoballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.boisephil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lawrencehallofscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sfperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lensic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haletheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tixonthesquare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.uccspresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calgaryopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.winspearcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usuo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.artscommons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatrecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arttix.artsaltlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.santafesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.santafechambermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performancesantafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.magicspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.intermountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.edmontonopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natest.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.montalvoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haughpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.philharmonicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.pcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pasadenaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.orsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lfjcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lobero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfestival.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.lagunaplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.groundlings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.sandiegosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.granadasb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.galloarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ensembletheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.broadwayrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.berkeleyrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artistsrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.sdrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction.theconrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.seattlesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesmithcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lamiradatheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.vancouveropera.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.pacificchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lamasterchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.thetech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mopop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiahistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hawaiiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.honolulumuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-tickets.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ybca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.worldofspeed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lutherburbankcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewallis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mondaviarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto.stanfordtickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordlivetickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordjazztickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.moonlightstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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