san-13-s51.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:68:62:5b:a2:53:b3:9c:28:32:96:00:87:10:77:02 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:68:62:5b:a2:53:b3:9c:28:32:96:00:87:10:77:02
Serial Number (int): 5858905792568992845013634661947045634
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ea:64:db:d8:0c:5a:9c:5b:93:6d:c5:c3:9c:37:fc:3c:3b:85:b1:d0
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): a1:76:4d:4e:0c:f8:57:bf:59:9f:b1:d8:bb:13:b8:dc:d6:ff:be:40
Fingerprint (sha256): 1f:81:d8:9b:9f:fd:0c:4d:1b:e8:18:a6:c2:29:23:3e:0b:1b:e7:4d:b6:36:5c:39:23:bd:1f:b4:61:d0:00:de

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-13-s51.tlsprovisioning.exacttarget.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-13-s51.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-13-s51.tlsprovisioning.exacttarget.com
image.kommunikation.jobrad.org
image.comms.omniyatdigital.com
image.cloud.ferring.com
image.email.pennyappeal.org
image.m.uaf.nl
image.partnerships.fundingcircle.com
image.e-lentillas.shop
image.email.qredits.nl
image.email.veolia.ie
image.e.cottages.com
image.info.misterfin.it
image.mail.love2shop.co.uk
image.b2bmail.musement.com
image.kasulik.iizi.ee
image.uk.hairskin.com
image.multimediacp.com
image.comunicazioni.abc.napoli.it
image.mail.smina.de
image.marketing.rtl.hu
image.hrtalk.england.nhs.uk
image.comms.hyde-housing.co.uk
image.e.veja-store.com
image.mail.rafc.be
image.sams.stellantis.com
image.info.acierto.com
image.nu.opendoors.nl
image.offers.radius.com
image.hcp-ca.apellis.com
image.news.demsupermercati.com
image.b2bmail.intercruises.com
image.comunicacao.sporting.pt
image.email.blue-estate.fr
image.email.kalevamedia.fi
image.marketing.feralpisalo.it
image.r202311a.s51.sfmc-tlsprovisioning.com
image.e.merkur.si
image.e.neoviaretraite.fr
image.emails.crowdhouse.com
image.mail.angelfunder.io
image.marketing.marelli.com
image.news.mail-bibliomed.de
image.send.myes.school
image.webphive.pt
image.comunicazioni.novas.sardegnasalute.it
image.e.leasys.com
image.em.arden.ac.uk
image.cc.nam.straumanngroup.info
image.comunicaciones.almina.es
image.email.chevalblanc.com
image.email.comms.iuk.ukri.org
image.grupovarma.com
image.hcp-au.apellis.com
image.info.vistavision.it
image.e.mijnkombijdepolitie.nl
image.info.refinerystore.co.za
image.infos.ecomaison.com
image.e.hoseasons.co.uk
image.newsletter.hearst.it
image.news.omya.com
image.info.rankomat.pl
image.yuenergy.co.uk
image.info.lfitness.pt
image.email.viaverde.pt
image.mail.moveloop.de
image.exed.telecom-paris.fr
image.e.drivalia.com
image.lgpartnerships.com
image.comms.nautorswan.com
image.communication.miyosmart.com
image.e-mail.ukimediaevents.com
image.info.allianz-voyage.fr
image.mail.wifinity.co.uk
image.marketing.rfu.com
image.customer.givimoto.com
image.email.micromotion.co.il
image.acteurspublics.media
image.business.pracuj.pl
image.email.kirkonulkomaanapu.fi
image.explore.dubaiholdingentertainment.com
image.explore.legoland.ae
image.news.gn.com
image.email.thamesvalley.police.uk
image.email.clipper.ventures
image.email.insyncinsurance.co.uk
image.mail.maaktmeerwerkend.nl
image.mail.motivated.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-13-s51.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49ch69jANBE5qzjE4izs
DFLxZLmFQ6XSMIyezaE82kqIdgw8YeFei+VOc1llTz3J8uKU+h8gqo8Uekgiq1Aa
DS58cYFZVePnF7/ja58TgIlxMgGZTLMQXXUPuboD4ZGnn5DTNO12bN0Yw4h4+3wP
R1Wou9gwHJajnGK19X58U+AdxqMOcR/TZs6mLwUtFVFQO4Z/W5iXHC2q21mJgPjQ
ymJqlU6fH8dJYIL33RgzEX6bEO9fDjB9uD/hFbLx5nFSnbp9HT+1Q+ThBO0gkCId
L51mf0hLYu87BPlZ+DY+9q5MQBl9kGWrUExLoAYnL4W3MXQkiVtS4xYxe0CAEVEM
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5858905792568992845013634661947045634
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-13-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28762181019374921566540824950831287039851196079416939693555264630878261364144349294687480272403977642963982116879841591542038810864221436222003613873880894985344255906880894715087445268956917573542677861263437070877108256049542430473462672368080165502355989357799912756904929997308358398375739103528176943370704426363020995863156183462394278259950158856508426359393479871360160154178621018274564167304211286513124552111328665398176547529923458070255338989656824001394805523608311828602136979233504085466080699737214972561343407432028529420728894324230028946188198031891639925736942651425295125084968820465304171777251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea64dbd80c5a9c5b936dc5c39c37fc3c3b85b1d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2432 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-13-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kommunikation.jobrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.omniyatdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.ferring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pennyappeal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.uaf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.partnerships.fundingcircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-lentillas.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.qredits.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.veolia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.cottages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.misterfin.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.love2shop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.b2bmail.musement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kasulik.iizi.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uk.hairskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.multimediacp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazioni.abc.napoli.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.smina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.rtl.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hrtalk.england.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.hyde-housing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.veja-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rafc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sams.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.acierto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nu.opendoors.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.offers.radius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hcp-ca.apellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.demsupermercati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.b2bmail.intercruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.sporting.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.blue-estate.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kalevamedia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.feralpisalo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r202311a.s51.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.merkur.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.neoviaretraite.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.crowdhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.angelfunder.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.marelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.mail-bibliomed.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.send.myes.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.webphive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazioni.novas.sardegnasalute.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.leasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.arden.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cc.nam.straumanngroup.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.almina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chevalblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.comms.iuk.ukri.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.grupovarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hcp-au.apellis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.vistavision.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mijnkombijdepolitie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.refinerystore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.infos.ecomaison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hoseasons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.hearst.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.omya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rankomat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.yuenergy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lfitness.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.viaverde.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.moveloop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.exed.telecom-paris.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.drivalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lgpartnerships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.nautorswan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.miyosmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-mail.ukimediaevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.allianz-voyage.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.wifinity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.rfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customer.givimoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.micromotion.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.acteurspublics.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.business.pracuj.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kirkonulkomaanapu.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.explore.dubaiholdingentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.explore.legoland.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.gn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.thamesvalley.police.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clipper.ventures'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.insyncinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.maaktmeerwerkend.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.motivated.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002edb715f0559c01552b40099fcbc8c1be5034a47bd1b2b8d3c48d8efe71d9a430b00a976087b68e75847e90ecdf3dd7257cfc8a706dbc1352a4ab9e3edfe50196ef2a4ab56f86b0c90d1fdf403ab27f504e9023170a3ae1ad38f7ab2036cdd858954936962daf4197dd9b8388628adf9b0408e3e41e969bd23b7f4af6594eb8147980c929500b7627b60b9a09387be93ea1b282d38731ccc21714cc534f8e2cbfbd9df08018dcc7aac8de1d8c9d12aab423133a3b278f0b8f247cf9132cacaed13e0927de5f83fb08291ec4333ed745174d7023b3ab2e6b29d55e3bbac703a4b39b6db8956b807619aef03d997132aca6dddae424e19b9499eddb7123993b99b