secure-usea2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:bc:45:31:02:fe:89:49:fa:6b:32:e6:60:45:f8:68 was issued on by DigiCert Inc.

With 111 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:45:31:02:fe:89:49:fa:6b:32:e6:60:45:f8:68
Serial Number (int): 4965239166128595883776797701772277864
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4c:86:e5:3d:29:8d:32:57:ac:2d:c4:16:5c:92:9e:e2:03:6f:fa:e5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f9:7a:be:ee:27:f0:56:22:62:a2:99:f8:e5:73:69:bc:dd:cd:04:be
Fingerprint (sha256): 34:ca:05:ca:35:6b:64:24:9c:da:b7:78:c1:c6:b3:b9:17:11:9c:65:1e:a4:4b:92:87:22:c6:1d:07:ff:9a:47

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure-usea2-1.tessituranetwork.com

111

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-usea2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tn.services
*.tnhs.cloud
buy.fwmuseum.org
naramptest.dallaszoo.com
tickets.alphawoodex.org
ticketing.humanrights.ca
billetterie.droitsdelapersonne.ca
my.hnoc.org
naramptest.perotmuseum.org
naramptest.zoosociety.org
my.thehermitage.com
my.ahhatulsa.org
my.theworldwar.org
cart.broadwaytheatrecenter.com
my.tuts.com
my.smm.org
my.mnopera.org
my.philbrook.org
my.writerstheatre.org
my.stagestheatre.org
My.TheSKyPAC.com
tickets.kcstarlight.com
buy.rwb.org
tickets.zachtheatre.org
tickets.kcsymphony.org
tickets.texasballettheater.org
tickets.kcopera.org
my.oxfordpac.org
secure-usea2-1.tessituranetwork.com
tickets.touhill.org
my.jazzstl.org
secure.dallasopera.org
secure.hbg.org
tickets.hjseries.org
my.thelongcenter.org
tickets.royalmtc.ca
tnewdev.mfah.org
tickets.milwaukeerep.com
my.mfah.org
tickets.crystalbridges-themomentary.org
tickets.milwaukeerep.org
order.cso.org
cart.ticketomaha.com
my.oklahomacontemporary.org
my.wso.ca
my.gilcrease.org
tix.theatre2.org
my.woodyguthriecenter.org
secure.kimbellart.org
tickets.wrightwood659.org
my.thinkeryaustin.org
members.kera.org
my.dallastheatercenter.org
shop.stlsymphony.org
my.desmoinesartcenter.org
my.thehobbycenter.org
buy.amptickets.com
ticketing.opera-stl.org
my.mnzoo.org
my.balletaustin.org
tickets.mercuryhouston.org
my.austinsymphony.org
my.desmoinesperformingarts.org
my.dacamera.com
tickets.thegilmore.org
secure.countrymusichalloffame.org
cart.joffrey.org
tickets.dallasopera.org
my.tulsabotanic.org
my.austinopera.org
my.wittemuseum.org
cart.mnhs.org
tickets.asf.net
my.alysstephens.org
tickets.grandtheater.org
cart.tpac.org
tix.eldomad.com
tickets.nashvillesymphony.org
shop.slso.org
my.hubbardstreetdance.com
cst1.tessituranetwork.com
t-secure-usea2-1.tessituranetwork.com
tickets.tulsaopera.com
secure.walkerart.org
tickets.overture.org
tickets.kauffmancenter.org
ticketing.graceland.com
my.thecarsoncenter.org
cart.nelson-atkins.org
cart.houstonsymphony.org
securesite.guthrietheater.org
my.dallaszoo.com
tickets.dct.org
cart.zoosociety.org
tickets.waltonartscenter.org
experience.mcachicago.org
ticketing.wilson-center.com
ticketing.kcrep.org
tickets.austintheatre.org
access.fwsymphony.org
orders.cocastl.org
my.childrenstheatre.org
ticketing.kcballet.org
tickets.houstonfirsttheaters.com
my.harristheaterchicago.org
my.tulsasymphony.org
tickets.liedcenter.org
tickets.perotmuseum.org
my.grantparkmusicfestival.com
my.tulsaballet.org
secure.dallassymphony.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
tessituranetwork.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-usea2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3OuN62WguQDf3F3c3e
A81ZfaTzTWkLL/iNkJqWqqK2gZpRMxVOaKrcHKbiuwg4yXaVb5XY3EOyVDV2vZUO
AmlrKL1Wacooq8ghlMIg1fhjx2VJ54t0CssuCyKJ5NTssoibeCKH70sGcSTVZaVb
AJY5RT7xH2cZ0Zfq8eyuBZjixhSXnbClDW5a49SzXvnGIa024uEDYN9rrePollA9
AqoGqy96x/exT2ZgP2yHtraRtEdcdHGKl70CSitkrHIIKOlWkGgpG0A7qq+/Vr0h
6pwxOCOpw34dfxkhcT3HGgCM7lPqtbC7ZX7361m97UwxKKSN76o8RdcBHtE7HT1v
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4965239166128595883776797701772277864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23502913247960766616221972986897380070527629556004014448515505331419644102197938086925810054765302138039858967562194966373120472162954241964997905591358081251697446309423599044104932761702843651213412512195717565300656215949478583530448833606572728522283664721817585245091236826593553068012522536157994381126854391801868139973129218720594023644585029426239012553497011482350655396627364686097437132805549796119685370609009194088105023671688477156790308503367735517341875341648063048095989044162837004352752564278011692697151804809478663339456798934659804568455454388265578933760940407457056416755701719017312023834469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c86e53d298d3257ac2dc4165c929ee2036ffae5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2549 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.fwmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.dallaszoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.alphawoodex.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.humanrights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billetterie.droitsdelapersonne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hnoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.perotmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.zoosociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehermitage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ahhatulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theworldwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.broadwaytheatrecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.philbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.writerstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stagestheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'My.TheSKyPAC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.rwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.zachtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.texasballettheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oxfordpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.touhill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jazzstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hbg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hjseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thelongcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.royalmtc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnewdev.mfah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.milwaukeerep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mfah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.crystalbridges-themomentary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.milwaukeerep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oklahomacontemporary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gilcrease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.theatre2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.woodyguthriecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kimbellart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wrightwood659.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thinkeryaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallastheatercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stlsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesartcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehobbycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.amptickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.opera-stl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.balletaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mercuryhouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dacamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegilmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.countrymusichalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.joffrey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsabotanic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wittemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.mnhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.asf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.alysstephens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.grandtheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.eldomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nashvillesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.slso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hubbardstreetdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.tulsaopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.walkerart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.overture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kauffmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.graceland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thecarsoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.nelson-atkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.houstonsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallaszoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.zoosociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.waltonartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mcachicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.wilson-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.austintheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fwsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.cocastl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.childrenstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.houstonfirsttheaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.harristheaterchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.liedcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.perotmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.grantparkmusicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsaballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallassymphony.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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