san-30-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 08:47:ff:f6:ff:aa:06:a7:0d:18:86:7b:89:58:72:47 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:47:ff:f6:ff:aa:06:a7:0d:18:86:7b:89:58:72:47
Serial Number (int): 11007668626936435739367565281470214727
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e4:09:08:5e:cd:a8:5d:30:ed:dd:71:39:6a:cd:f9:de:c2:42:33:4c
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): d6:a3:34:de:4d:01:c8:42:49:e7:b0:35:86:e6:06:2f:fa:71:8c:8b
Fingerprint (sha256): 28:a2:be:92:bb:ec:6e:33:ce:1a:d8:88:8b:86:4f:59:e5:3c:76:1e:6f:15:34:b0:a4:ba:a2:db:c2:60:fe:a4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate san-30-s12.tlsprovisioning.exacttarget.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-30-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-30-s12.tlsprovisioning.exacttarget.com
image.amendnews.com.br
image.beseen.asyouare.com
image.btgpactualusa.com
image.clientes.grupocapem.com
image.club29.com
image.comms.health-x.com
image.communications.ccac.edu
image.contato.energia.raizen.com.br
image.contentjanssenlatam.com
image.crm.origin.co.th
image.crmmarketing.wsu.edu
image.directvforbusiness.pacificconceptsgroup.com
image.duckthrurewards.cstoresavings.com
image.e.fordcredit.com
image.e.goldin.co
image.e.heartofcontractility.com
image.e.hellotds.com
image.e.southco.com
image.e.tdsbusiness.com
image.e.tdsfiber.com
image.e.tdstelecom.com
image.e.touchpointmed.com
image.e.unishippers.com
image.e.weareartisans.hk
image.e.wwex.com
image.edm.tumi.my
image.edm.tumi.sg
image.em.downtownshealthcare.com
image.em.martinguitar.com
image.email.alkomprar.com
image.email.alkosto.com
image.email.baycoastbank.com
image.email.baycoastinsurance.com
image.email.canteen.org.au
image.email.ccombank.com
image.email.creighton.edu
image.email.eliteelevators.com
image.email.epicbrokers.com
image.email.kalley.com
image.email.ktronix.com
image.email.li-lacchocolates.com
image.email.movember.com
image.email.nibavlifts.com
image.email.pliadv.com
image.email.priloan.com
image.email.quadrantbiosciences.com
image.email.quadrantlaboratories.com
image.email.sualuz.com.br
image.email.twamev.com
image.email.tyrvaya-pro.com
image.email.valleystrong.com
image.email.vintageview.com
image.email.wedc.org
image.email.ymcasd.org
image.emails.flbsolutions.com
image.emails-thinkedu.com
image.engage.allenglobalstudies.com
image.ethos-cannabis.com
image.gmmodular.live
image.go.rideamigos.com
image.info.acertx.com
image.info.elementfleet.com
image.info.esser-werke.de
image.info.totalpass.com.br
image.info1.lodhagroup.in
image.ma.greenbeans.com
image.ma.orixbank.co.jp
image.mail.airsculpt.com
image.mail.beal.edu
image.mail.mitsloan.mit.edu
image.mail.theaftd.org
image.mail588.jh.edu
image.marketing.acquia.com
image.marketing.ara.com
image.marketing.missiongroup.ca
image.marketing.toyota.com.co
image.marketing.vitriumcapital.com
image.mc.odakyu-fudosan.co.jp
image.member.moomin.co.jp
image.mkt.ceosgo.com.br
image.mkt.datamar.com.br
image.mkt.smilink.com.br
image.msg.royalenfield.com
image.news.supernosso.com
image.parkbridgemarketing.com
image.relacionamento.sofisa.com.br
image.sales.wellnessextract.org
image.sevenmp2.st-omni7.jp
image.sf.dilmahtea.com
image.sfmc.velasresorts.com
image.sirena.com.do
image.t.sunwing.ca
image.tundralandemail.homeserviceapt.com
image.updates.fglife.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-30-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0oFvtPHc3nJ73GWpe9sVNbxd15ts
pPt5jiouU/+MNMbSTdiiDtWtVRc/0PZ3X2Srtvyqr+wXlgJR1FE6Ut1c3Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11007668626936435739367565281470214727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-30-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d2816fb4f1dcde727bdc65a97bdb1535bc5dd79b6ca4fb798e2a2e53ff8c34c6d24dd8a20ed5ad55173fd0f6775f64abb6fcaaafec17960251d4513a52dd5cdd
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e409085ecda85d30eddd71396acdf9dec242334c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2641 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-30-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.amendnews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.beseen.asyouare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.btgpactualusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientes.grupocapem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.club29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.health-x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.ccac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contato.energia.raizen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contentjanssenlatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.origin.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crmmarketing.wsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.directvforbusiness.pacificconceptsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.duckthrurewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fordcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.goldin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.heartofcontractility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hellotds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.southco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.tdsbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.tdsfiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.tdstelecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.touchpointmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.unishippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.weareartisans.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.wwex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.tumi.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.tumi.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.downtownshealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.martinguitar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.alkomprar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.alkosto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.baycoastbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.baycoastinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.canteen.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ccombank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.creighton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eliteelevators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.epicbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ktronix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.li-lacchocolates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.movember.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nibavlifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pliadv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.priloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.quadrantbiosciences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.quadrantlaboratories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sualuz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.twamev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tyrvaya-pro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.valleystrong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vintageview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wedc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ymcasd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.flbsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails-thinkedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.allenglobalstudies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ethos-cannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gmmodular.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.rideamigos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.acertx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.elementfleet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.esser-werke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.totalpass.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info1.lodhagroup.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.greenbeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.orixbank.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.airsculpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.beal.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mitsloan.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.theaftd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail588.jh.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.ara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.missiongroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.toyota.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.vitriumcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.odakyu-fudosan.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.member.moomin.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.ceosgo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.datamar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.smilink.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msg.royalenfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.supernosso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.parkbridgemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.sofisa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.wellnessextract.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sevenmp2.st-omni7.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.dilmahtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.velasresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sirena.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.t.sunwing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tundralandemail.homeserviceapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.fglife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18801810566958506205312753251430898528947443618573537059816659214211512731680411669763600572849060281166820276955123
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 14994917981478312363573359975796325797285869333581714387340203529766845502692102825331553190335034577321608084644411