secure-euwe1-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:70:07:ce:a3:07:6d:48:7d:01:4a:8e:39:c1:65:17 was issued on by DigiCert Inc.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:70:07:ce:a3:07:6d:48:7d:01:4a:8e:39:c1:65:17
Serial Number (int): 11215519562758966334508701381138933015
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:6a:95:eb:42:2e:f9:ab:3f:a9:3c:16:d6:77:87:7b:ca:31:bc:89
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 38:57:65:1c:76:51:93:b5:21:e0:c3:8d:74:34:42:c0:d0:72:3f:58
Fingerprint (sha256): 1d:cc:c1:17:ba:d2:0f:0e:65:bc:5c:7e:f6:16:62:1f:18:08:a9:73:72:83:2b:bc:e3:a1:ca:57:03:32:41:5b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate secure-euwe1-1.tessituranetwork.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-euwe1-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-euwe1-1.tessituranetwork.com
*.tn.services
*.tnhs.cloud
t-secure-euwe1-1.tessituranetwork.com
eu1.tessituranetwork.com
basket.scottishballet.co.uk
tnew.theatreroyal.co.uk
tickets.thecorecorby.com
tickets.northamptonfilmhouse.com
tickets.trch.co.uk
my.sciencemuseum.org.uk
tickets.royalandderngate.co.uk
tickets.bclm.com
booking.abbeytheatre.ie
tickets.bridgewater-hall.co.uk
booking.garsingtonopera.org
my.npg.org.uk
tickets.everymanplayhouse.com
ticketing.almeida.co.uk
tickets.lakesidearts.org.uk
ticketing.grangeparkopera.co.uk
tickets.youngvic.org
my.scienceandmediamuseum.org.uk
my.hampsteadtheatre.com
my.somersethouse.org.uk
shop.kingsplace.co.uk
secure.ballet.org.uk
purchase.cambridgeartstheatre.com
basket.shakespearesglobe.com
my.railwaymuseum.org.uk
account.cbso.co.uk
my.royalacademy.org.uk
ticketing.mayflower.org.uk
my.scienceandindustrymuseum.org.uk
my.theatreroyal.com
tickets.oae.co.uk
basket.thegulbenkian.co.uk
secure.waterfront.co.uk
my.nationalgallery.org.uk
my.sadlerswells.com
my.locomotion.org.uk
tickets.museums.cam.ac.uk
ticketing.mayflowerstudios.org.uk
tickets.bhlivetickets.co.uk
tickets.nationaltheatre.org.uk
my.leedstickethub.co.uk
my.iccbelfast.com
usa.shakespearesglobe.com
secure.cheltenhamfestivals.com
myaccount.courtauld.ac.uk
tickets.fairfield.co.uk
tickets.bournemouthpavilion.co.uk
tickets.bic.co.uk
my.horniman.ac.uk
tickets.nationaljusticemuseum.org.uk
my.svr.co.uk
fy.amgueddfa.cymru
my.museum.wales
secure.dulwichpicturegallery.org.uk
my.nms.ac.uk
ticketing.lpo.org.uk
ticketing.britishmuseum.org
www.tickets.bl.uk
biljetter.malmostadsteater.se
my.zsl.org
biljetter.skanesdansteater.se
booking.fabric.dance
tickets.glasgowlife.org.uk
secure.rsc.org.uk
ticketing.theglasshouseicm.org
eudemo.tessituranetwork.com
my.scienceinnovationpark.org.uk

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
tessituranetwork.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-euwe1-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0STsfRtyotIzPgbwPjJ
49wKFZ0Mo5WvCc9TQhdn+7pWYmvCtqh3EGgWS8uMourLkeaJXb656KZS5LH8VV4x
A5E2Ww0Lx/yA4GeSVc8tLJepJbyJ9i+tDSY/2qo59qj7qSROvPqyB00El+WUbYWo
KjlAmnxFoSB2HBiunWLm51t8uJnnoNekeH0RR6IMjb/uoJQaCYuzKsOHnHP+9Eb8
v+SceK6ePaLVEieDMhfYPRRuOj3/P3AthyKmjifSrjUHf8YPjVzI9xT+041Ql3nz
Qlkb1oZz37AiY9mRuXf2khrRkTpW0I2BVZ4ibqB/EXNNpIylUfzHxIzER46bWfog
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11215519562758966334508701381138933015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-euwe1-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22125519915637129143296248366881459754778532998870577896772755864694080997241803692463106100839552357808825025075884715201820657246506060092360184184204087922518817701659189458997280988494631973429875776976106818916922289176707841596537609396608605808671502771662787350697902290711750059258581766645205111498957322788868665192623838367621907103023257082505831964719347667764440754549588137428241495332280013386328748326792468910400706554584262780091757915993618386020661171023514488421694500195618054080767766011685063705990813326834191766065847811183329220765979512946933334195774037976867629779181898233866373177421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d6a95eb422ef9ab3fa93c16d677877bca31bc89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-euwe1-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-euwe1-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basket.scottishballet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnew.theatreroyal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thecorecorby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.northamptonfilmhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.trch.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sciencemuseum.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.royalandderngate.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.bclm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.abbeytheatre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.bridgewater-hall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.garsingtonopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.npg.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.everymanplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.almeida.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lakesidearts.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.grangeparkopera.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.youngvic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scienceandmediamuseum.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hampsteadtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.somersethouse.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kingsplace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ballet.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.cambridgeartstheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basket.shakespearesglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.railwaymuseum.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.cbso.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.royalacademy.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.mayflower.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scienceandindustrymuseum.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreroyal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.oae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basket.thegulbenkian.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.waterfront.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nationalgallery.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.sadlerswells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.locomotion.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.museums.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.mayflowerstudios.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.bhlivetickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nationaltheatre.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.leedstickethub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.iccbelfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa.shakespearesglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cheltenhamfestivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.courtauld.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.fairfield.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.bournemouthpavilion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.bic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.horniman.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nationaljusticemuseum.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.svr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fy.amgueddfa.cymru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.museum.wales'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dulwichpicturegallery.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nms.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.lpo.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.britishmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickets.bl.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biljetter.malmostadsteater.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.zsl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biljetter.skanesdansteater.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.fabric.dance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.glasgowlife.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rsc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.theglasshouseicm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eudemo.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scienceinnovationpark.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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