portal.loyaltyops.carlsonmarketing.com

- Carlson Marketing Worldwide Inc -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number 55:09:b8:8a:f0:28:ce:49:71:34:70:a9:4c:3f:55:7f was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Carlson Marketing Worldwide Inc

Organization: Carlson Marketing Worldwide Inc
Organization unit: Carlson Marketing IT Operation
Organization unit: Hosted by Carlson Marketing Worldwide, Inc.
Organization unit: PlatinumSSL
Address: Suite 150
Address: 1405 Xenium Lane N.
Postal code: 55441
State / Province: MN
Locality: Plymouth
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 55:09:b8:8a:f0:28:ce:49:71:34:70:a9:4c:3f:55:7f
Serial Number (int): 113034853284623895073489427680246846847
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 15:42:ef:d2:5a:05:11:ef:2d:be:1b:18:36:bf:58:97:eb:83:5d:1b
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): ef:e0:8a:15:3d:b2:e7:8b:b1:03:1d:18:24:b8:0f:61:5e:67:4c:80
Fingerprint (sha256): 1d:23:da:38:99:e8:47:99:5e:c7:37:84:18:dc:b1:20:18:30:fe:15:3f:2a:42:08:4c:e2:6e:11:f1:47:80:92

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate portal.loyaltyops.carlsonmarketing.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.loyaltyops.carlsonmarketing.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.loyaltyops.carlsonmarketing.com
www.portal.loyaltyops.carlsonmarketing.com

Other certificates including the domain name carlsonmarketing.com

(limited to 100 certificates)
www.carlsonmarketing.com
digitalvault.carlsonmarketing.com
exl.demo.us.aimia.com
www.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
portal-qa.loyaltyops.carlsonmarketing.com
matrixcsrus-qa.carlsonmarketing.com
qa.merialrewardsclinicprogram.carlsonmarketing.com
us.aimia.com
portal.loyaltyops.carlsonmarketing.com
fusionTVR-qaua.us.aimia.com
merialrewardsplusclinic-qa.carlsonmarketing.com
fusiontvr.carlsonmarketing.com
us.aimia.com
clientreporting.carlsonmarketing.com
themix.us.aimia.com
fusiontvr-qaua.carlsonmarketing.com
merchwebadmin.carlsonmarketing.com
Carlsonmarketing.com
q17rptu.carlsonmarketing.com
digitalvault.us.aimia.com
gpsadmin-qa.carlsonmarketing.com
Carlsonmarketing.com
merialclinicprograms-qa.carlsonmarketing.com
membertvr-qa.carlsonmarketing.com
merialrewardsplus-qa.us.aimia.com
merialrewardsplusclinic-qa.us.aimia.com
p17rptu.carlsonmarketing.com
wsgateway.com
fusionTVR-qa.us.aimia.com
carlsonmarketing.com
www.carlsonmarketing.com
cca.carlsonmarketing.com
secure-edev-dev.carlsonmarketing.com
wsgateway.carlsonmarketing.com
digitalvault-qa.carlsonmarketing.com
exl.qa.carlsonmarketing.com
mycardlink-qa.us.aimia.com
merchwebadmin-qa.carlsonmarketing.com
swebstats.carlsonmarketing.com
membertvr-qaua.us.aimia.com
Carlsonmarketing.com
merialrewards-qa.carlsonmarketing.com
exl.demo.carlsonmarketing.com
exlreports.carlsonmarketing.com
fusiontvr-dev.carlsonmarketing.com
fusiontvr-qa.carlsonmarketing.com
cis.carlsonmarketing.com
membertvr-qaua.carlsonmarketing.com
secure-edev.carlsonmarketing.com
mycardlinksite-qa.carlsonmarketing.com
myglobalcard-qa.carlsonmarketing.com
entiera-report-qa.carlsonmarketing.com
gpsadmin-qa.us.aimia.com
merialrewardsclinicprogram-qa.us.aimia.com
merialrewardsplus-qa.carlsonmarketing.com
mycccoupon-qa.carlsonmarketing.com
clientreporting-qa.aimia.com
exlreports-qa.aimia.com
myCCCoupon-qa.us.aimia.com
www.carlsonmarketing.com
Carlsonmarketing.com
myglobalcardsite-qa.carlsonmarketing.com
merialclientconnectionplus-qa.carlsonmarketing.com
*.qa.carlsonmarketing.com
exl.carlsonmarketing.com
merialclientconnection-qa.carlsonmarketing.com
secure-ede.carlsonmarketing.com
exl.dev.carlsonmarketing.com
d17rptu.carlsonmarketing.com
clientreporting-qa.carlsonmarketing.com
matrixcsrus.carlsonmarketing.com
cca-qa.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
exl.us.aimia.com

Certificate

The complete raw certificate details for portal.loyaltyops.carlsonmarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDiU1PRs2AjT19d6gmfBZyiu1Uc
6ZECLBf2oSVRVZeBwGTtsE5we3KhHx42dsTWHOGXvdgd+emmQFKWv37Z/nMhj6JX
TfsoQUBLKhsBXzrU7UKTHbEdyN4SolDSYRGtN1hwws3w3u9SDXu/nL6UvvY9g38k
QGdpWKMQosdt13yS2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 113034853284623895073489427680246846847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55441'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suite 150'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1405 Xenium Lane N.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlson Marketing Worldwide Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlson Marketing IT Operation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Carlson Marketing Worldwide, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.loyaltyops.carlsonmarketing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 158931169340253731204045508520191679112242121177766728758880362146959057005617247202474354716249688713138917915113791204146689335785947195514870723864369330765991050739704840277033926355866942586951413232886491787394703215884973561918412195627983515128798871154255555291995138706830543477231058619400724452059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1542efd25a0511ef2dbe1b1836bf5897eb835d1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.loyaltyops.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.loyaltyops.carlsonmarketing.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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