securessl-est2.tessituranetworkhost.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:40:d2:3b:8a:98:d7:9a:cc:90:31:74:0c:27:b8:1a was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: TX
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:40:d2:3b:8a:98:d7:9a:cc:90:31:74:0c:27:b8:1a
Serial Number (int): 17616534967522196752620173889018247194
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 44:35:ca:b9:e2:1e:5f:11:0e:d3:75:ee:19:57:8f:e1:5b:1f:9d:45
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0d:70:34:85:66:d9:53:50:73:7f:a2:ba:67:67:63:84:fc:81:c7:72
Fingerprint (sha256): 1d:10:3e:c6:f0:fa:dd:d6:50:72:df:00:8a:a4:1b:c9:7e:5c:bf:e0:56:1b:fd:f5:d2:e5:f4:c1:e3:10:c9:75

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate securessl-est2.tessituranetworkhost.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securessl-est2.tessituranetworkhost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securessl-est2.tessituranetworkhost.com
my.cballet.org
patrons.imaginationstage.org
tickets.playmakersrep.org
cart.bostonballet.org
boxoffice.kalamazoosymphony.com
tickets.millerauditorium.com
my.kazoocivic.com
my.airzoo.org
ticket.americanrepertorytheater.org
tnew.mfa.org
account.cmnh.org
engage.clevelandart.org
my.pem.org
my.osc.org
donate.woodruffcenter.org
my.high.org
secure.hillwoodmuseum.org
my.jaxsymphony.org
familyfun.woodruffcenter.org
my.intrepidmuseum.org
my.tafelmusik.org
dpactickets.nd.edu
secure.rutheckerdhall.com
cart.woodruffcenter.org
tickets.frostscience.org
my.torontoconsort.org
ticketing.rockhall.com
secure.vafest.org
my.bigarts.org
tickets.wilmatheater.org
tickets.peopleslight.org
tickets.annenbergcenter.org
my.adventuretheatre-mtc.org
shop.burnsfilmcenter.org
my.avaopera.org
supporter.fonz.org
tickets.brtstage.org
the.floridaorchestra.org
tickets.mediatheatre.org
tickets.paintedbride.org
myptc.philadelphiatheatrecompany.org
tickets.olneytheatre.org
ramp.mysticaquarium.org
tickets.ogunquitplayhouse.org
cart.handelandhaydn.org
my-mon.nature.ca
tickets.dukeon42.org
ticketing.cincyplay.com
my.nycopera.com
cart.2st.com
boxoffice.porttix.com
my.icaboston.org
reservations.bam.org
tickets.appellcenter.org
tickets.11thhourtheatrecompany.org
tickets.georgiaaquarium.org
my.tdf.org
tickets.mccarter.org
tickets.kentuckycenter.org
cart.gettysburgfoundation.org
experience.museumofcontemporaryart.ca
reservations.marineland.net
my.firstpersonarts.org
tnew.gardnermuseum.org
my.artsphilly.org
tickets.roundabouttheatre.org
my.ica.vcu.edu
my.wexarts.org
my.americanancestors.org
my.historicnewengland.org
my.papermill.org
ticketing.fwphil.org
shop.ctsciencecenter.org
naramptest.americanancestors.org
tickets.newvictory.org
tickets.callawaygardens.com
my.smithsonianassociates.org
secure.thecenterpresents.org
my.operacarolina.org
my.ringling.org
visit.thejamesmuseum.org
my.filmforum.org
tickets.su.edu
euramptest.abbeytheatre.ie

Other certificates including the domain name tessituranetworkhost.com

(limited to 100 certificates)
securessl-pst1.tessituranetworkhost.com
incapsula.com
securessl-eu.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
sdna-paloapp.tessituranetworkramp.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
*.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com

Certificate

The complete raw certificate details for securessl-est2.tessituranetworkhost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINMzCCDBugAwIBAgIQDUDSO4qY15rMkDF0DCe4GjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNDE4MDAwMDAwWhcN
MTgwOTA1MTIwMDAwWjB/MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVFgxDzANBgNV
BAcTBkRhbGxhczEgMB4GA1UEChMXVGVzc2l0dXJhIE5ldHdvcmssIEluYy4xMDAu
BgNVBAMTJ3NlY3VyZXNzbC1lc3QyLnRlc3NpdHVyYW5ldHdvcmtob3N0LmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMa+XPWJE5mDiGrT8auVgSpv
biAo1jr7vYEjxPvK3hOyZvn1YtSS2SUxrUtANcqn72PsC+2gbGGO9EaWOnFExTdd
XyhEgNh796jNNGEAu6bODDLuZN5dPbPNAQOynn+BxwU7ZsaYnoFtl4z9uKuq4lG8
Nb6U9cwSkQ2XPJOmA/gnDbGEpiu1g5bhHVMfK8R0z2t8SMMzt4Ul4Bz8blZ5z+Kr
QTFUP11sIlbjcYV4w/VAvCb10T8vv/b2eGz8MnoJrLKXCV67Xca4ggqELWBT4s3V
jWOgMPcRpUqzKbvwFzRLO7pgei8IYqQSGyAHK97190wHw+xx1eJke6lEhtxv3GkC
AwEAAaOCCdswggnXMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0G
A1UdDgQWBBRENcq54h5fEQ7Tde4ZV4/hWx+dRTCCCAgGA1UdEQSCB/8wggf7gidz
ZWN1cmVzc2wtZXN0Mi50ZXNzaXR1cmFuZXR3b3JraG9zdC5jb22CDm15LmNiYWxs
ZXQub3JnghxwYXRyb25zLmltYWdpbmF0aW9uc3RhZ2Uub3Jnghl0aWNrZXRzLnBs
YXltYWtlcnNyZXAub3JnghVjYXJ0LmJvc3RvbmJhbGxldC5vcmeCH2JveG9mZmlj
ZS5rYWxhbWF6b29zeW1waG9ueS5jb22CHHRpY2tldHMubWlsbGVyYXVkaXRvcml1
bS5jb22CEW15Lmthem9vY2l2aWMuY29tgg1teS5haXJ6b28ub3JngiN0aWNrZXQu
YW1lcmljYW5yZXBlcnRvcnl0aGVhdGVyLm9yZ4IMdG5ldy5tZmEub3JnghBhY2Nv
dW50LmNtbmgub3JnghdlbmdhZ2UuY2xldmVsYW5kYXJ0Lm9yZ4IKbXkucGVtLm9y
Z4IKbXkub3NjLm9yZ4IZZG9uYXRlLndvb2RydWZmY2VudGVyLm9yZ4ILbXkuaGln
aC5vcmeCGXNlY3VyZS5oaWxsd29vZG11c2V1bS5vcmeCEm15LmpheHN5bXBob255
Lm9yZ4IcZmFtaWx5ZnVuLndvb2RydWZmY2VudGVyLm9yZ4IVbXkuaW50cmVwaWRt
dXNldW0ub3JnghFteS50YWZlbG11c2lrLm9yZ4ISZHBhY3RpY2tldHMubmQuZWR1
ghlzZWN1cmUucnV0aGVja2VyZGhhbGwuY29tghdjYXJ0Lndvb2RydWZmY2VudGVy
Lm9yZ4IYdGlja2V0cy5mcm9zdHNjaWVuY2Uub3JnghVteS50b3JvbnRvY29uc29y
dC5vcmeCFnRpY2tldGluZy5yb2NraGFsbC5jb22CEXNlY3VyZS52YWZlc3Qub3Jn
gg5teS5iaWdhcnRzLm9yZ4IYdGlja2V0cy53aWxtYXRoZWF0ZXIub3Jnghh0aWNr
ZXRzLnBlb3BsZXNsaWdodC5vcmeCG3RpY2tldHMuYW5uZW5iZXJnY2VudGVyLm9y
Z4IbbXkuYWR2ZW50dXJldGhlYXRyZS1tdGMub3JnghhzaG9wLmJ1cm5zZmlsbWNl
bnRlci5vcmeCD215LmF2YW9wZXJhLm9yZ4ISc3VwcG9ydGVyLmZvbnoub3JnghR0
aWNrZXRzLmJydHN0YWdlLm9yZ4IYdGhlLmZsb3JpZGFvcmNoZXN0cmEub3Jnghh0
aWNrZXRzLm1lZGlhdGhlYXRyZS5vcmeCGHRpY2tldHMucGFpbnRlZGJyaWRlLm9y
Z4IkbXlwdGMucGhpbGFkZWxwaGlhdGhlYXRyZWNvbXBhbnkub3Jnghh0aWNrZXRz
Lm9sbmV5dGhlYXRyZS5vcmeCF3JhbXAubXlzdGljYXF1YXJpdW0ub3Jngh10aWNr
ZXRzLm9ndW5xdWl0cGxheWhvdXNlLm9yZ4IXY2FydC5oYW5kZWxhbmRoYXlkbi5v
cmeCEG15LW1vbi5uYXR1cmUuY2GCFHRpY2tldHMuZHVrZW9uNDIub3Jnghd0aWNr
ZXRpbmcuY2luY3lwbGF5LmNvbYIPbXkubnljb3BlcmEuY29tggxjYXJ0LjJzdC5j
b22CFWJveG9mZmljZS5wb3J0dGl4LmNvbYIQbXkuaWNhYm9zdG9uLm9yZ4IUcmVz
ZXJ2YXRpb25zLmJhbS5vcmeCGHRpY2tldHMuYXBwZWxsY2VudGVyLm9yZ4IidGlj
a2V0cy4xMXRoaG91cnRoZWF0cmVjb21wYW55Lm9yZ4IbdGlja2V0cy5nZW9yZ2lh
YXF1YXJpdW0ub3JnggpteS50ZGYub3JnghR0aWNrZXRzLm1jY2FydGVyLm9yZ4Ia
dGlja2V0cy5rZW50dWNreWNlbnRlci5vcmeCHWNhcnQuZ2V0dHlzYnVyZ2ZvdW5k
YXRpb24ub3JngiVleHBlcmllbmNlLm11c2V1bW9mY29udGVtcG9yYXJ5YXJ0LmNh
ghtyZXNlcnZhdGlvbnMubWFyaW5lbGFuZC5uZXSCFm15LmZpcnN0cGVyc29uYXJ0
cy5vcmeCFnRuZXcuZ2FyZG5lcm11c2V1bS5vcmeCEW15LmFydHNwaGlsbHkub3Jn
gh10aWNrZXRzLnJvdW5kYWJvdXR0aGVhdHJlLm9yZ4IObXkuaWNhLnZjdS5lZHWC
Dm15LndleGFydHMub3JnghhteS5hbWVyaWNhbmFuY2VzdG9ycy5vcmeCGW15Lmhp
c3RvcmljbmV3ZW5nbGFuZC5vcmeCEG15LnBhcGVybWlsbC5vcmeCFHRpY2tldGlu
Zy5md3BoaWwub3JnghhzaG9wLmN0c2NpZW5jZWNlbnRlci5vcmeCIG5hcmFtcHRl
c3QuYW1lcmljYW5hbmNlc3RvcnMub3JnghZ0aWNrZXRzLm5ld3ZpY3Rvcnkub3Jn
ght0aWNrZXRzLmNhbGxhd2F5Z2FyZGVucy5jb22CHG15LnNtaXRoc29uaWFuYXNz
b2NpYXRlcy5vcmeCHHNlY3VyZS50aGVjZW50ZXJwcmVzZW50cy5vcmeCFG15Lm9w
ZXJhY2Fyb2xpbmEub3Jngg9teS5yaW5nbGluZy5vcmeCGHZpc2l0LnRoZWphbWVz
bXVzZXVtLm9yZ4IQbXkuZmlsbWZvcnVtLm9yZ4IOdGlja2V0cy5zdS5lZHWCGmV1
cmFtcHRlc3QuYWJiZXl0aGVhdHJlLmllMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4YpaHR0cDov
L2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwL6AtoCuGKWh0dHA6
Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMEwGA1UdIARFMEMw
NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwCAYGZ4EMAQICMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYY
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2Fj
ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0
MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL
BQADggEBAFb3NZm6Zk9p+qdyOEY+FvOqP4kGAMISl9yVoFmRodSyKmfG0d2PHVdt
5R///AL1bC8FprnsDC5PFjq9W5WDupmkpmEt2p9JpOFhY7Fui5unTd3MesPHNeId
p24koqTnhTCCsIYqJkfYkJZo6TlpYPwfGH/1x/wkuVSUD7yU3hb11HuX0Xb741oJ
+WMe3RGnr4xBUQanfRGIdRZvXXWfxS5VxUvZcHbBmHn4CcIJ7lWoMddpEvL4by7V
sseR3MTFWv8UGGrr2PcU3f6/GM4RWV8sguqB+Vcjlyh9tVMnbA+9CHDQ5mQSKuNv
kps5MBsdcRTXQzf9fUGF5/zrhhxgbLs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr5c9YkTmYOIatPxq5WB
Km9uICjWOvu9gSPE+8reE7Jm+fVi1JLZJTGtS0A1yqfvY+wL7aBsYY70RpY6cUTF
N11fKESA2Hv3qM00YQC7ps4MMu5k3l09s80BA7Kef4HHBTtmxpiegW2XjP24q6ri
Ubw1vpT1zBKRDZc8k6YD+CcNsYSmK7WDluEdUx8rxHTPa3xIwzO3hSXgHPxuVnnP
4qtBMVQ/XWwiVuNxhXjD9UC8JvXRPy+/9vZ4bPwyegmsspcJXrtdxriCCoQtYFPi
zdWNY6Aw9xGlSrMpu/AXNEs7umB6LwhipBIbIAcr3vX3TAfD7HHV4mR7qUSG3G/c
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17616534967522196752620173889018247194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securessl-est2.tessituranetworkhost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25089055937168334415818380502144831701514420128569196544393326625852527897731219244194649387469777093764144614267664871718100161750595090199468016799930926363678171580555097085219361962156792222017277577284758332927404776632282060841694322526357169489408410681475975544527422303339078499772659370952059106547383770698018674169214695158830928359289496222635867064411260066953446849285923974813808781256347066888316165545560788470270653852642575811271461627373021217540689947137349051401816223393528418057603888476734811140496234566719759546083454154205515080395715507557957107169865495734950124908020228652255146925161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4435cab9e21e5f110ed375ee19578fe15b1f9d45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securessl-est2.tessituranetworkhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrons.imaginationstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.playmakersrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.bostonballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.kalamazoosymphony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.millerauditorium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.kazoocivic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.americanrepertorytheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.mfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cmnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.clevelandart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.osc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.high.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hillwoodmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jaxsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyfun.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.intrepidmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tafelmusik.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dpactickets.nd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rutheckerdhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.woodruffcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.frostscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.torontoconsort.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.rockhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vafest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bigarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wilmatheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.peopleslight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.annenbergcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.adventuretheatre-mtc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.burnsfilmcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.avaopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.fonz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.brtstage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the.floridaorchestra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mediatheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.paintedbride.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myptc.philadelphiatheatrecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.olneytheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramp.mysticaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ogunquitplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.handelandhaydn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mon.nature.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dukeon42.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.cincyplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nycopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.2st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.porttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.icaboston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.bam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.appellcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.11thhourtheatrecompany.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.georgiaaquarium.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tdf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mccarter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kentuckycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.gettysburgfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.museumofcontemporaryart.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.marineland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.firstpersonarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.gardnermuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artsphilly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.roundabouttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ica.vcu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wexarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.historicnewengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.papermill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.fwphil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ctsciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.americanancestors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.newvictory.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.callawaygardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smithsonianassociates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thecenterpresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacarolina.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ringling.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.thejamesmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.filmforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.su.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euramptest.abbeytheatre.ie'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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