san-11-s10.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:03:f0:e3:c0:70:9c:38:b5:6e:07:d7:9a:7b:75:9e was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:03:f0:e3:c0:70:9c:38:b5:6e:07:d7:9a:7b:75:9e
Serial Number (int): 1349690709015546807453262470060930462
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 91:ec:1b:73:cb:fd:38:f8:f5:50:47:b0:b9:bf:73:21:28:e5:4f:e5
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): df:39:ed:95:d1:f4:f5:b0:11:02:a0:cd:e9:74:d8:17:8e:14:23:56
Fingerprint (sha256): 29:4d:ee:7b:3c:2c:84:dc:03:40:5b:6b:13:a2:a4:a0:7d:3c:41:29:5e:41:f4:72:b7:d2:53:14:34:4f:f9:72

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-11-s10.tlsprovisioning.exacttarget.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-11-s10.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-11-s10.tlsprovisioning.exacttarget.com
image.alfaromeo.astara.com
image.asianews.worldfirst.com.cn
image.caring.forestlawn.com
image.caryconnected.org
image.checking.nav.com
image.communicate.purdue.edu
image.communications.rbc.com
image.communications-invesco.com
image.comunicacao.serasaexperian.com.br
image.comunicaciones.carsycars.com
image.cx.calcard.com.br
image.e.coursetune.com
image.e.fluidra.com
image.e.lkqcorp.com
image.e.mcmworldwide.com
image.e.soundoflife.com
image.e.vannicholas.com
image.e.zarraffas.com
image.em.reebok.com
image.email.asociart.com.ar
image.email.chcarolinaherrera.me
image.email.filorga.com
image.email.imc-mnc.ca
image.email.matouk.com
image.email.myselfdirectedira.com
image.email.nrgprotects.com
image.email.ozdesignfurniture.com.au
image.email.rsea.com.au
image.email.safecu.org
image.email.sennheiser-hearing.com
image.email.shatterproof.org
image.email.teamglobalexp.com
image.email.tempo-team.de
image.email.thincevents.com
image.email.versace-mea.com
image.email.worldhealthevents.com
image.email-formica-eu.com
image.emailing.cav.cl
image.emailjp.lhh.com
image.emails.careismaticbrands.com
image.em-hrhcac.com
image.hello.nav.com
image.hellomail.nissan.at
image.hellomail.nissan.ch
image.info.ilmeridian.com
image.info.mitsubishi-motors.cl
image.info.ssangyong.cl
image.mail.360imprimir.com.br
image.mail.360imprimir.es
image.mail.360imprimir.pt
image.mail.7-eleven.ca
image.mail.7-eleven.com
image.mail.bizay.com
image.mail.mtrustcompany.com
image.mail.novey.com.pa
image.mail.sancristobalcaja.com.ar
image.mail.sancristobalretiro.com.ar
image.mail.sancristobalsf.com.ar
image.mail.springerfachmedien.de
image.mail.teach.org
image.mail.vuse.jp
image.mails.schwab.com
image.marketing.goodyearautocare.com.au
image.marketing.goodyearfleet.com.au
image.marketing.sgproof.com
image.mc2.adp.com
image.mejorestarifasdeluzhoy.com
image.miccosukee-mail.com
image.moreys.info
image.news.latagliatella.com
image.news.ph.com.mx
image.news.rarorealty.com
image.news.vult.com.br
image.newsletter.mea-maisonmargiela.com
image.podefalar.ticketlog.com.br
image.procurementhubcomms.co.uk
image.property.lntrealty.com
image.r20230315.s10.sfmc-tlsprovisioning.com
image.reedexhibitionsbrasil.com.br
image.relacionamento.spcbrasil.org.br
image.rethinkbronchiectasis.com
image.sfmc.metro.net
image.sfmc2.edx.org
image.shoeco.co.nz
image.shop.flor.com
image.smc2.corewellhealth.org
image.store.skechers.com.mx
image.update.ochsner.org
image.us-communications.ipsen.com
image.us-email.ipsen.com
image.us-patient.ipsen.com
image.us-updates.ipsen.com
image.vippreferredpayments.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-11-s10.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gk+6z8Ns3k0sOTQCEai
nz+du27JNrGzWUQeVXTeaj2hWxSrSfD5elnlr4D0dWPfLOHFAC/5tfiBgzEYGR8d
PI1MQWUdSZBfZbplj7MRvylbXti4lO1YKKmST1uuZRay+94b3R7D8yyt0kMPN8Eo
sLz2A6j3owo/51x7oVL52UkU4blXWaPsrs990ZiUgPFDqRnBWpihD8wNpgeJgHqI
Y//qiEZRqwlK7UEylXWlw16Ro43CNBt12wvjPTUdr9/quVLMFAdqQ4dDu91Iraby
lcknDysXeBwiOrtj95/U0bUYoi6zyokCkjLneWW4OoCEtJInRkAcGikHrrFm+Oxe
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1349690709015546807453262470060930462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-11-s10.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28029462965066105905514568060740605954817724952784148688530887643114276160899244039228466474676072248978303443069790730813358646030957557338677611504589802769967418940961869447912841383532484203810973502398229656140279476110405800836743155196119378659067362035905439342633070281879004596574530799434343216476752465156538854508606724035250469032286732741892701442241943036524798862774545861816831869297776873233793087372685679952363399225222054287094983887939089048207356211215094508341195246934638481777704266912654381954481493983066871881433447905178666660669481259299303240882691467099015562237874593376311773519451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91ec1b73cbfd38f8f55047b0b9bf732128e54fe5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-11-s10.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.alfaromeo.astara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.asianews.worldfirst.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.caring.forestlawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.caryconnected.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.checking.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communicate.purdue.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.rbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications-invesco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.serasaexperian.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.carsycars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cx.calcard.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.coursetune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fluidra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.lkqcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mcmworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.soundoflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vannicholas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.zarraffas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.reebok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.asociart.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chcarolinaherrera.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.filorga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.imc-mnc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.matouk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.myselfdirectedira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nrgprotects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ozdesignfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rsea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.safecu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sennheiser-hearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shatterproof.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.teamglobalexp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tempo-team.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.thincevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.versace-mea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.worldhealthevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-formica-eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailing.cav.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailjp.lhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.careismaticbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em-hrhcac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hellomail.nissan.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hellomail.nissan.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.ilmeridian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mitsubishi-motors.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.ssangyong.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.360imprimir.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.360imprimir.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.360imprimir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.7-eleven.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.7-eleven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bizay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mtrustcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.novey.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.sancristobalcaja.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.sancristobalretiro.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.sancristobalsf.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.springerfachmedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.teach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vuse.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mails.schwab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.goodyearautocare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.goodyearfleet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.sgproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc2.adp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mejorestarifasdeluzhoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.miccosukee-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.moreys.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.latagliatella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.ph.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.rarorealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.vult.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.mea-maisonmargiela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.podefalar.ticketlog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.procurementhubcomms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.property.lntrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r20230315.s10.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.reedexhibitionsbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.spcbrasil.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rethinkbronchiectasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.metro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc2.edx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shoeco.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shop.flor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc2.corewellhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.store.skechers.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.update.ochsner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-communications.ipsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-email.ipsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-patient.ipsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-updates.ipsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vippreferredpayments.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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