san-18-s12.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:8e:84:90:87:5f:56:ca:07:e4:0c:0f:99:87:d0:e1 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:8e:84:90:87:5f:56:ca:07:e4:0c:0f:99:87:d0:e1
Serial Number (int): 18019958827934670074634793212248051937
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c5:63:8b:8c:35:f9:73:6e:2d:10:45:de:8d:f2:13:8b:ea:58:15:e9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 22:37:4b:5a:41:9c:e5:f6:98:aa:2f:f2:b9:a5:cc:fd:41:a3:33:3d
Fingerprint (sha256): 2e:1a:79:e2:ea:66:fb:f1:7e:53:5f:73:23:bb:a9:43:e6:ea:d4:a5:12:f9:85:ec:2d:c7:2e:5c:5f:13:b0:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-18-s12.tlsprovisioning.exacttarget.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-18-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-18-s12.tlsprovisioning.exacttarget.com
image.ss.eneos-cl.com
image.launch.stackadapt.com
image.email.whites.com
image.email.bose.com
image.campaigns.wltic.com
image.email.centraldeconcursos.com.br
image.email.dignifi.com
image.email.laifbymedix.com
image.email.ondecksports.com
image.email.phmic.com
image.mail.traincelcompliance.com
image.email.fmtrust.bank
image.info.br.fiserv.com
image.mail.poupex.com.br
image.marketing.jpwindustries.com
image.mkt.datago.com.br
image.shop.zennioptical.com
image.tce.thetabernaclechoir.org
image.mail.ariahealth.com
image.care4u.atlanticare.org
image.email.elcaminohealth.org
image.emails.helzberg.com
image.hello.tribal.credit
image.camp.eacamps.org
image.e.killbusyseason.com
image.newsletter.vinilsul.com.br
image.2ndamendmentalert.com
image.e.bcaa.com
image.elisestefanik.com
image.email.blakemasters.com
image.fighting4schools.com
image.mx.bitcar.mx
image.info.rech.com
image.ma.jfr-card.co.jp
image.marketing.mahindrafinance.com
image.mc.baldmountainrvpark.com
image.connected.depaul.edu
image.email.saliencehealth.com
image.info.bub-inc.com
image.mail.konaexelcrm.com
image.mail.pontolivelo.com.br
image.aromicstyle.net
image.email.launchpad-tech.com
image.info.aeon.com.hk
image.mag.osakagas.co.jp
image.your.lonestaragcredit.com
image.engage.suveto.com
image.lgrewards.cstoresavings.com
image.marketing.ekmtc.com
image.marketing.tennis.com.co
image.pro.candidco.com
image.smile.candidco.com
image.email.anablock.com
image.email.thecoreinstitute.com
image.m.complexcounsel.com
image.email.findnursingschools.com
image.comms.asahibeverages.com.au
image.customer.bankunited.com
image.e.genedx.com
image.e2.global.llbean.com
image.e2.llbean.ca
image.email.aldersonloop.com
image.email.circuitclinical.com
image.etraky.one
image.evanik.in
image.news.cobrarolamentos.com.br
image.blog.laughregular.com
image.experience.goldengatefields.com
image.experience.laurelpark.com
image.experience.santaanita.com
image.leasing.onefleetservices.com
image.leasing.tipmexico.com
image.mail.joseandres.com
image.mkt.vibesaude.com
image.e.moretoadhd.com
image.e.myepilepsyexplained.com
image.e.oxtellarxr.com
image.e.oxtellarxrhcp.com
image.e.team-adhd.com
image.content.yave.mx
image.email.oshihealth.com
image.mail.cacaushow.com.br
image.marketing.sfbank.com
image.marketingpash.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-18-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLQCYV1fKNMlFrjntBcc
ir02ZtAqeBM/nqGi4fc5/5aKQuK/dDyrxWblRbB0H6Cc/kSKyME/7HwdpY1nlvuA
VBDEgIDe5JTdQ5JycBrYNDUQgoud09UQDMjMrhCxNyjAohWeMJhX67KVP/4jJu52
DB7PsFrC0T670VH6M7IWgG6fyo2GOqEPfWSw3vgNzESU0bN1M4oNr1n8+6Whxmb4
4C4MVfTZLJsRAXn+acoGVoVpDPI9zCtZZI/UOhBu6Q6je5ocQRVrXXAttZT4bX7H
LKgnvz7PT3R3xibob5lKy1b52RWEBi4Dqahk/ffSXjU5KHiFcuZ0UTYn6bslCdkL
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18019958827934670074634793212248051937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-18-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20791847907710367781722460568067582270970695733673612751720270061780890098640242135347865653647460283484287793273157040789682394591554847524568728820632152127070782568154338525274103880122289764238754860587690792326991291834350346907893651105192551650652904428035767466600141222801404406216040230549359415170512415567308300156483988391179571836671975133864730470749870430051337883036048243490858944409585061126629082002487250096074522771315346745911724686607273123806106479137561841733417472233017077167493520981246898267122119878298536419936210016185448756635883262814965483871069794213410843488851065061363909462939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5638b8c35f9736e2d1045de8df2138bea5815e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-18-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ss.eneos-cl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.launch.stackadapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.whites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campaigns.wltic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.centraldeconcursos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dignifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.laifbymedix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ondecksports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.phmic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.traincelcompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fmtrust.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.br.fiserv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.poupex.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.jpwindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.datago.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shop.zennioptical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tce.thetabernaclechoir.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ariahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.care4u.atlanticare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.elcaminohealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.helzberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.tribal.credit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.camp.eacamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.killbusyseason.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.vinilsul.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.2ndamendmentalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bcaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.elisestefanik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.blakemasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fighting4schools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mx.bitcar.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.jfr-card.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.mahindrafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.baldmountainrvpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connected.depaul.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.saliencehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bub-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.konaexelcrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.pontolivelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.aromicstyle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.launchpad-tech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aeon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mag.osakagas.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.lonestaragcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.suveto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lgrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.ekmtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.tennis.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pro.candidco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smile.candidco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.anablock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.thecoreinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.complexcounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.findnursingschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.asahibeverages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customer.bankunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.genedx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e2.global.llbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e2.llbean.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.aldersonloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.circuitclinical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.etraky.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.evanik.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cobrarolamentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.blog.laughregular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.goldengatefields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.laurelpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.santaanita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.leasing.onefleetservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.leasing.tipmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.joseandres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.vibesaude.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.moretoadhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.myepilepsyexplained.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oxtellarxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oxtellarxrhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.team-adhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.yave.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.oshihealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cacaushow.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.sfbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingpash.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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