san-16-s50.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:75:a7:f3:a3:65:0e:35:7e:7e:39:ff:31:2e:45:d3 was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:75:a7:f3:a3:65:0e:35:7e:7e:39:ff:31:2e:45:d3
Serial Number (int): 3269361189433932582123822907697022419
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 40:9a:f8:a3:fc:c4:ad:e9:7b:72:d2:4c:14:41:28:bb:99:ed:59:d9
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 05:94:a1:5f:56:07:08:48:c3:24:e1:6d:9d:99:f6:43:8a:ad:7b:16
Fingerprint (sha256): 19:fa:5b:2d:8f:68:e3:c7:d5:25:2d:57:a3:86:ce:b5:fe:99:b1:20:67:86:d1:79:25:fe:9d:2f:49:7f:19:dc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-16-s50.tlsprovisioning.exacttarget.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-16-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-16-s50.tlsprovisioning.exacttarget.com
image.e.dyson.in
image.e.dyson.com.sg
image.email.grandoptical.pt
image.email.multiopticas.pt
image.email.abacus.es
image.info.bbvaspark.com
image.info.chimi-online.com
image.comunicazione.isybank.com
image.fr.chiesi.com
image.marketing.kinto-mobility.it
image.e.holidaydiscounter.com
image.sf.videndummediasolutions.com
image.lp.volkswagen.pt
image.lp.volkswagen-comerciais.pt
image.emails.dogstrust.ie
image.stellantis-me.com
image.wepik.com
image.client.foyerglobalhealth.com
image.contact.mobilize-pay.com
image.crm.wits.ac.za
image.connect.four-paws.org.au
image.email.ticino.ch
image.videvo.net
image.comunicacion.huelva24.com
image.email.cetaphil.ca
image.laingsuk.com
image.pss2.basf.com
image.us-ag.basf.com
image.lta-tennisfoundation.com
image.email.vaillant.dk
image.mail.danonenutriciacampus.org
image.airbp.email
image.content.dewars.com
image.e.dyson.com.tr
image.content.bacardilimited.com
image.deptstudios.com
image.mail.cewe.fr
image.ggef2.email
image.mktg.fratelligiacomel.it
image.email.ceac.com
image.mail.milkandmore.co.uk
image.bauerfeind-sports.com
image.em.at.leasys.com
image.em.be.leasys.com
image.em.de.leasys.com
image.em.es.leasys.com
image.em.joinrs.com
image.retail-media.coop.ch
image.email.deustoformacion.com
image.email.deustosalud.com
image.mail.fotoparadies.de
image.email.dentapointinternational.com
image.email.derome.se
image.email.distrettolaghi.it
image.notifications.seat.com
image.contact.mobilize-fs.pl
image.ccp.clientcareplatform.com
image.members.myaudiworld.sg
image.dentelli.qunosuite.com
image.email.algeacare.com
image.email.nordichotels.com
image.email.strawberry.no
image.link.thepetstable.com
image.mail.virtuagym.com
image.sfmarkcloud.valtech.com
image.adv.galvanina.com
image.mail.cewe.ch
image.r20230315.s50.sfmc-tlsprovisioning.com
image.em.fr.leasys.com
image.em.nl.leasys.com
image.em.pl.leasys.com
image.em.pt.leasys.com
image.em.uk.leasys.com
image.communication.carglass.fr
image.email.turismonovara.it
image.nexo.com
image.email.a-hus.se
image.news.yves-rocher.de
image.info.lacompagnie.com
image.marketing.forini.com
image.core-news.yves-rocher.com
image.de.nestlehealthscience.com
image.mail.lasexta.com
image.service.aerzteversicherung.de
image.mail.aliaserviziambientali.it

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-16-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWZlh4u/voycJ0QzaDIY
5dn5uWJPAzz1iwxW9Ik8XEhEEAefUCQKLShwjF7Mvc69UgYF2r2niq4ebnLu9QvM
gox6hKpW723X0PMmQyrIYVaai24FGMWCUshR2YK5ZJmf3Hse4KPUVDHKZDv+whGy
KEiLrV8L9qeW1fO1d9/fNDndgtnlIDQJPVXxHKIUaZ41cRFld8ookLcsTGTl29w3
uOFXy4vOQR8JUK0h19TFxLAnFoHHxcAvfnQUaSit+/pEZuP1+ceYHtUC5l0FiE7T
chOO+8Q0QGuoTJKo8hjXYKntMgKjc3LlPKoxIwGPaDuoYudnAmQ003+hk/O2XLJg
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3269361189433932582123822907697022419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-16-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23404580063866216485743299607597665217845978765107529638851140233360075464329843827270891911983930507469727268433965607135159784977874077158018038837842478257866019368628202894178727030830193942010075905913186783281733971433951622561088545342057097942324948009224520744085245985644430037119414753423009075327122772899640071480063744095872303332928390619515366365151026085993944249938740906235500374390231745725360064464862625601598168748877176194546762499860542358206975667504997466840477624245639085242387594623448877555099932049913307338277857756168756934500640985010751617392918906131530979900387931959266536218699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							409af8a3fcc4ade97b72d24c144128bb99ed59d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2377 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-16-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.grandoptical.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.multiopticas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.abacus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bbvaspark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.chimi-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazione.isybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fr.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.kinto-mobility.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.holidaydiscounter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.videndummediasolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.volkswagen.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.volkswagen-comerciais.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.dogstrust.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.stellantis-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wepik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.client.foyerglobalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-pay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.wits.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.four-paws.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ticino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.videvo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.huelva24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cetaphil.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.laingsuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pss2.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-ag.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lta-tennisfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vaillant.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.danonenutriciacampus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.airbp.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.dewars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.bacardilimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.deptstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cewe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ggef2.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.fratelligiacomel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ceac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.milkandmore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bauerfeind-sports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.at.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.be.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.de.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.es.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.joinrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.retail-media.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.deustoformacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.deustosalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fotoparadies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dentapointinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.derome.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.distrettolaghi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notifications.seat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ccp.clientcareplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.myaudiworld.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dentelli.qunosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.algeacare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nordichotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.strawberry.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.thepetstable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.virtuagym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmarkcloud.valtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.adv.galvanina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cewe.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r20230315.s50.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.fr.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.nl.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.pl.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.pt.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.uk.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.carglass.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.turismonovara.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.a-hus.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lacompagnie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.forini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.core-news.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.de.nestlehealthscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lasexta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.aerzteversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.aliaserviziambientali.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0031ba1b42ff9e9327d7a69d0e693831c24be75526b1a148e533b5e297b1501ac9dab4a43ebaf0468525cec1eb1066883b4f5d1ea1024a31ed5a07c8cc3573a1c2f3f2a97e13e4fb8bd2882880840b45655b6971bac4db4e32cf6338bbe6615a0ea1d6b9d75b0957930b1fc807b50726b34de1e02166f067b02746544c46d1cdb35722734035447fc1387142acd679a5aa193e1ed58389f419191cb13b11715b2eb1af577e5e3e585202546b3fc31921c17c1d189fc42f3c635f90ab3609595f9db3924b12927d77946caaf21a2e7413e43bedce370f3b3f739b712a420f95da8cc5ff165bce74a93c64d1b3f68c3d77cc32513e666be80e597db27d96cf1186f3