san-4-s51.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:41:e5:38:7b:8b:14:75:a5:b6:f1:23:0d:33:d0:98 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:41:e5:38:7b:8b:14:75:a5:b6:f1:23:0d:33:d0:98
Serial Number (int): 10975972408895221324906515422868918424
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:bc:7e:a1:c8:1a:16:cd:4c:9e:d1:f5:b5:46:b5:59:ee:d3:bc:ba
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 8d:6c:65:3f:99:61:32:49:12:15:05:dd:3c:55:f9:42:1c:54:e1:e1
Fingerprint (sha256): 27:5a:2a:b7:fc:4a:f4:b3:ef:5a:2a:af:04:5e:dd:a4:8c:3c:f7:2a:0e:43:49:5e:d0:e3:b5:5e:25:bc:8e:7c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-4-s51.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-4-s51.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-4-s51.tlsprovisioning.exacttarget.com
image.abt.mueller.eu
image.bbpm.crmbancobpm.it
image.brokerinfo.lv.co.uk
image.brtpemails.com
image.comms.blinkpayment.co.uk
image.comms.nspcc.org.uk
image.communication.riu.com
image.comunicacion.ccastermas.com
image.comunicaciones.gruposyrsa.com
image.connect.vindisgroup.com
image.contact.maier.fr
image.crm.comune.cagliari.it
image.dev.notificaciones.endesaclientes.com
image.digital.danhotels.com
image.digital.florisvanbommel.com
image.e.davidlloydclubs.co.uk
image.ecom.reprocolor.fr
image.em.aah.co.uk
image.em.enterpriseotc.co.uk
image.em.tridentonline.co.uk
image.email.argaam.com
image.email.bibliomed.de
image.email.divilo.io
image.email.docoapp.com
image.email.dogger.se
image.email.duab.eu
image.email.formula1.com
image.email.hylte-lantman.com
image.email.migros.com.tr
image.email.mknorth.eu
image.email.mym.news
image.email.nanushka.com
image.email.pepperfinance.es
image.email.qaf.ae
image.email.sandicliffe.co.uk
image.email.savetherhino.org
image.email.schoeffel.com
image.email.unitestudents.com
image.email.veolia.co.uk
image.email.wabicar.com
image.emails.asda.com
image.explore.globalvillage.ae
image.graf-uk.co.uk
image.iletisim.sahibinden.com
image.info.capitecbank.co.za
image.info.centrowagen.es
image.info.cnpsantander.com
image.info.funmed.se
image.info.grupo-paradigma.com
image.info.hairskin.com
image.info.lotuscars.com
image.info.metroauto.fi
image.institutorubi.es
image.km.redcross.org.lb
image.m.dpostar.com
image.m.isis-formations.com
image.mail.betterview.ch
image.mail.chicco.com
image.mail.constructor.university
image.mail.greshamhouse.com
image.mail.hammerson.com
image.mail.jvd-group.com
image.mail.mifcom.de
image.mail.seatunique.com
image.mailing.rfea.es
image.maillucypittaway.co.uk
image.marketing.reynaers.com
image.marketing.shalmana.com
image.marketingpreference.com
image.mc.natsana.com
image.members.hagerty.co.uk
image.mkt.letsrebold.com
image.mktcl.grupoautoindustrial.pt
image.mueller-beauty-store.mueller.eu
image.my.silhouette.com
image.ncx.nissan-me.ae
image.neolithofficial.com
image.news.bancaprogetto.it
image.news.beauty-star.it
image.news.caddys.it
image.news.next125.com
image.news.sercotel.com
image.news.stellamccartneybeauty.com
image.newsletter.bucci-industries.com
image.nissan-crm.almoayyed.com
image.obanco.santander.pt
image.promoreggini.it
image.queencartorino.com
image.sales.netflorist.co.za
image.service.standardlife.co.uk
image.subscribers.footdistrict.com
image.supporters.oxfamnovib.nl
image.updates.lotuscars.com
image.web.oracdecor.com
image.web.tndm.pt

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-4-s51.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v6mOnz40kUCYsa+WcaK
PPTyrloYNdQpyYYLyUjVIzj9OWxe4Tbai8qDrc+npKUyf5aEtFAIeE/Tmbxb0wu4
YzI91c2LuOh3X3tEi1rSIhACnyLFn5FtWZONNrhNFlRuLBWd1ALlvylB9xWwFpiw
P/O5CJwPuiq1SPGQsi3cT/LMX98Y61PhQTmSrXNH+Wzcr68d6wahGKpy9i54NLRc
jesG4gLmFWsI8J3alxcr8afFB8DRXgNT5zdlql7FM54DaZhTMPN9K7LzqOixViDT
LdpJ/VUUnQuUmMqUnKmK/WTpk1dy0Aa/fNx7rqx50K705yUh3nsQyDG8ZuLlzxNg
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10975972408895221324906515422868918424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-4-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29160382406938505308062732645544484976304287398395572017030560872435016756775398605277052989257870002328057802342271897682876433611316484844617449218813414091832502804695378902210230352760335916224340509954115600716361773207651991899735964212978166072268807426234654333555824482519952679939425760091406200413977365796052597598186545540951083967733214623406416521833982693756910330926054425894182041957224448965140873893161500457880099679071487658998293862105204912010172420288509827509661353033452864720614408634206437801030867066668145177154010560742843956022015850007788267465535782607624058044731888409444709785673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0bc7ea1c81a16cd4c9ed1f5b546b559eed3bcba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2679 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-4-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.abt.mueller.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bbpm.crmbancobpm.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.brokerinfo.lv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.brtpemails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.blinkpayment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.nspcc.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.riu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.ccastermas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.gruposyrsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.vindisgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.maier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.comune.cagliari.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dev.notificaciones.endesaclientes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.danhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.florisvanbommel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.davidlloydclubs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ecom.reprocolor.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.aah.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.enterpriseotc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.tridentonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.argaam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bibliomed.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.divilo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.docoapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dogger.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.duab.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.formula1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.hylte-lantman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.migros.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mknorth.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mym.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nanushka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pepperfinance.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.qaf.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sandicliffe.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.savetherhino.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.schoeffel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.unitestudents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.veolia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wabicar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.asda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.explore.globalvillage.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.graf-uk.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.iletisim.sahibinden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.capitecbank.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.centrowagen.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cnpsantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.funmed.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.grupo-paradigma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.hairskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lotuscars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.metroauto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.institutorubi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.km.redcross.org.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.dpostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.isis-formations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.betterview.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.chicco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.constructor.university'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.greshamhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hammerson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.jvd-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mifcom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.seatunique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.rfea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maillucypittaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.reynaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.shalmana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingpreference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.natsana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.hagerty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.letsrebold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktcl.grupoautoindustrial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mueller-beauty-store.mueller.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.silhouette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ncx.nissan-me.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neolithofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.bancaprogetto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.beauty-star.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.caddys.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.next125.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.sercotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.stellamccartneybeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.bucci-industries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nissan-crm.almoayyed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.obanco.santander.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.promoreggini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.queencartorino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.netflorist.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.standardlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.subscribers.footdistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.supporters.oxfamnovib.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.lotuscars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.oracdecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.tndm.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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