san-13-s50.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:b0:8b:13:e3:b1:b0:8c:01:04:bc:6f:f4:a2:27:f7 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:b0:8b:13:e3:b1:b0:8c:01:04:bc:6f:f4:a2:27:f7
Serial Number (int): 11550489044119362817698832805768865783
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 99:4b:57:45:27:9a:21:8b:96:5d:8d:cd:30:47:1b:2b:7e:b5:58:e4
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): f0:44:95:11:86:99:6e:e8:42:c4:f1:9d:17:88:ed:0d:5d:05:e8:c3
Fingerprint (sha256): 2b:24:98:fa:99:64:bc:1b:62:38:50:f9:23:cd:f3:18:b3:f7:a3:35:04:3a:68:05:de:3b:86:38:77:0c:18:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-13-s50.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-13-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-13-s50.tlsprovisioning.exacttarget.com
image.mail1.elsanta-sante.info
image.mail1.novea-nutrition.com
image.marketing.kedge.edu
image.marketingcloud.ora-egypt.com
image.mijn.gomes.nl
image.mkt.isd.eu
image.mobility-business.totalenergies.com
image.my.idheap.ch
image.news.interdiscount.ch
image.news.microspot.ch
image.news.movetia.ch
image.news.nossaaposta.pt
image.news.onlyyou-privilege.fr
image.news.womennow.es
image.newsletter.welife.es
image.professional.galdermahcp.co.za
image.program-mail.grohe.com
image.r20220628.s50.sfmc-tlsprovisioning.com
image.sf.email.kbcbank.bg
image.sf.levanteud.es
image.takedaitalia.com
image.trading.bp.email
image.tualarma.proseguralarms.com
image.web.florim.com
image.1916.legia.pl
image.allerganaesthetics.co.za
image.bellet.app
image.ch.new-category.com
image.communication.1store.fi
image.comunicacion.7canibales.com
image.comunicacion.burgosconecta.es
image.comunicacion.canarias7.es
image.comunicacion.leonoticias.com
image.comunicacion.madridfusion.net
image.comunicacion.mujerhoy.com
image.comunicacion.salamancahoy.es
image.comunicacion.sumauto.com
image.comunicacion.topcomparativas.com
image.comunicacion.turium.es
image.comunicaciones.comercializadoraregulada.es
image.comunicazioni.schesir.com
image.connect.mhp.com
image.contact.liujo.com
image.contact.mobilize-fs.at
image.contact.mobilize-fs.ch
image.dm.edenred.fr
image.dometvie-email.com
image.e.bmwlifestyle.stichd.com
image.e.bouwteam.nl
image.e.dyson.co.uk
image.e.dyson.com.mx
image.e.dyson.cz
image.e.dyson.ie
image.e.dyson.sk
image.e.dysoncanada.ca
image.e.sennashop.stichd.com
image.email.alsa.fr
image.email.auden.com
image.email.edenred.fr
image.email.elvia.no
image.email.encuentromoda.com
image.email.eyekandy.com
image.email.facom.com
image.email.garance-mutuelle.fr
image.email.groupehenry.be
image.email.mares.com
image.email.mumbo.lt
image.email.pgmbm.io
image.email.sanderspuzzelboeken.nl
image.email.yellowkorner.com
image.emails.customersupport.ericsson.net
image.es.nestlehealthscience.com
image.info.accademialascala.it
image.info.afpa.fr
image.info.cgd.pt
image.info.getnet.com.ar
image.info.getnet.mx
image.info.lottomatica.it
image.info.rcibank.co.uk
image.info.zoggs.com
image.intl.ecoatm.com
image.link.factormeals.ca
image.link.greenchef.nl
image.link.youfoodz.com
image.m.savoysignature.com
image.mail.creditreform-news.com
image.mail.enistation.de
image.mail.insights.lombard.co.uk
image.mail.insights.natwest.com
image.mail.insights.rbs.co.uk
image.mail.insights.ulsterbank.co.uk
image.mail.mojainsurance.co.uk
image.mail.myluxuryjourney.lvmh.com
image.mail.nestlehealthconnect.com
image.mail.zurich.co.id

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-13-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaP4z7NYYGE3rv2tiodS
h22WtfsFmsWwIxksZ1QU+fbW3NdW9J4erO6EzcZkjJafoJCXfMzyWlwZ18cPrIBu
97WYQ5dk4OUj932CZwSZqMfJfv3xEZgBhOoZA6ZXeQhw5Kj9k95x3OIEXwGKGVUC
q54M1j+7ltkZRrbe2zSRI7Kw2hSvmC39sxI5E642b6IDLDQnjdS75HqDardcjIbJ
HDLqiS10ppDd323FzXcVqt/fB0cd/kL2wVKLiptUH4s8wm+sZ6rw7/vllcneu/Z6
U9Jg1kztZoxjbgVPVmePUQIEAcjWh8BOZ5+GmVPDnvds0fiKa5w0eOOcL28Gaqtf
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11550489044119362817698832805768865783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-13-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22425037545981851824399468001881248610699220884164601200624625314072024746258129775085141878612157660952196285900389666052438707505879749468813298137299491383444758284335265168508056645945210933493781715556305234823688981524138673647471057176874589578007451043614977825521559345859200738518189270780202351911704982877830457554430132381220862708732701526021259954478787919028842766673383250531499474740352974629546235142527258757986898184560200371713007279801826687993234461927597284360909837499854534438832591665492483820092633397067530776352151162001496547423315942281634796111771329009454238408222975309879825883021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							994b5745279a218b965d8dcd30471b2b7eb558e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2747 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-13-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.elsanta-sante.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.novea-nutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.kedge.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingcloud.ora-egypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mijn.gomes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.isd.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mobility-business.totalenergies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.idheap.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.interdiscount.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.microspot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.movetia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.nossaaposta.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.onlyyou-privilege.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.womennow.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.welife.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.professional.galdermahcp.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.program-mail.grohe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r20220628.s50.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.email.kbcbank.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.levanteud.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.takedaitalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.trading.bp.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tualarma.proseguralarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.florim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.1916.legia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaesthetics.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bellet.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ch.new-category.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.1store.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.7canibales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.burgosconecta.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.canarias7.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.leonoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.madridfusion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.mujerhoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.salamancahoy.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.sumauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.topcomparativas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.turium.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.comercializadoraregulada.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazioni.schesir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.mhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.liujo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.edenred.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dometvie-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bmwlifestyle.stichd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bouwteam.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dysoncanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.sennashop.stichd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.alsa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.auden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.edenred.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.elvia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.encuentromoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eyekandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.facom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.garance-mutuelle.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.groupehenry.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mumbo.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pgmbm.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sanderspuzzelboeken.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.yellowkorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.customersupport.ericsson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.es.nestlehealthscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.accademialascala.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.afpa.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cgd.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.getnet.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.getnet.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lottomatica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rcibank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.zoggs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.intl.ecoatm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.factormeals.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.greenchef.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.youfoodz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.savoysignature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.creditreform-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.enistation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.insights.lombard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.insights.natwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.insights.rbs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.insights.ulsterbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mojainsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.myluxuryjourney.lvmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nestlehealthconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.zurich.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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