san-9-s51.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:84:b1:f1:81:b8:ec:f5:86:7d:a8:e7:a4:96:4b:38 was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:84:b1:f1:81:b8:ec:f5:86:7d:a8:e7:a4:96:4b:38
Serial Number (int): 16639728255379727630578057561167514424
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:e7:29:07:29:4f:20:ad:3c:f1:6a:51:88:36:a9:63:77:31:eb:f3
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ee:bb:ca:1a:34:82:8a:2f:c0:a4:71:53:6a:48:ec:58:a5:f5:6a:54
Fingerprint (sha256): 37:07:fe:f9:d2:83:f2:33:b7:4a:5f:19:70:d5:38:81:ff:d1:2a:ef:1f:ab:0e:73:dd:7c:a6:81:0d:24:16:e5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-9-s51.tlsprovisioning.exacttarget.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-9-s51.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-9-s51.tlsprovisioning.exacttarget.com
image.comms.montblancnaturalresort.com
image.e.carrefoursa.com
image.email.mark3d.co.uk
image.crm.huspy.com
image.email.barschool.net
image.email.edenconveyancing.com
image.email.pastiglieleone.com
image.email.theroofgardens.com
image.groupefaurie.fr
image.info.raiffeisencasa.ch
image.mail.eutelsat.com
image.mail.wolford.com
image.mkt.lge.com
image.email.djoef.dk
image.email.unicef.at
image.eu-petcare.mars.com
image.news.teamdeutschland.de
image.qwic.bike
image.clientes.amavir.es
image.chemical.shell.com
image.interiorsurfaces.mkt.renolit.com
image.pool.mkt.renolit.com
image.coorpid.com
image.post.dierenbescherming.nl
image.e.franck.eu
image.mkt.renolit.com
image.client.portdebarcelona.cat
image.crm.liverpool.ac.uk
image.email.bricoio.it
image.novedades.ahoreca.com
image.comunicazioni.groupama.it
image.flights.aerlingus.com
image.info.fredmangroup.com
image.hondahub.honda.co.uk
image.crm.lavazza.com
image.email.spierfonds.nl
image.engage.fmtsgroup.it
image.mailings.novissa.ch
image.autoretail.cloud
image.vps.videndum.com
image.ctremails.ca
image.e.boilerjuice.com
image.email.vfonds.nl
image.email.b2b.adidas.com
image.em.hipto.com
image.ftpemails.mx
image.i.morabanc.ad
image.m.wobi.co.il
image.comunicazioni.assolombarda.it
image.email.comune.genova.it
image.mail.timenterprise.it
image.mail.lloydslistintelligence.com
image.aofoundation.org
image.comunicacion.idilia.es
image.epc-informa.it
image.news.cunef.edu
image.email.beck-shop.de
image.email.condor.com
image.mail.innovazione.gov.it
image.mailing.fimmg.org
image.mailpolpharma.com
image.marketing.omv.com
image.r2-20230526-1.s51.sfmc-tlsprovisioning.com
image.marketing.shavve.co.il
image.news.dei.gr
image.email.conforama.es
image.newsoneshotsolution.it
image.info.sogemedia.fr
image.uk.teethtoday.com
image.from.sawdays.co.uk
image.mail.g.network
image.comunicazioni.24orebs.com
image.email.bluebiz.info
image.info.iatiseguros.com
image.mail.hellotv.nl
image.flucamp.com
image.info.upmmetsa.fi
image.marketing.bindingsite.com
image.notificaciones.helloauto.com
image.inf.aegon.es
image.info.alldent-holding.de
image.marketing.zeekr.eu
image.newsletter.finotivefunding.com
image.communication.jcb.com
image.mail.anagramhq.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-9-s51.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ojq3QG9+dTKTzdygYIC
CV0nl9VbD044n7npUz26seNU9bQaqesrWVu+vkesxW3K8wubvf+1oSfXA2juMwsR
VV54NTdERI52K6/VJx5nmIBcQubodpiqhnvqNPPERWpJeAZh0FuwVhGKjejpo7GG
zwVLA6pv/UQH3SfFvGkG2xslHPxRM8pxvPEdsH4eE5FxOkBC5tfDKbIQJ83ugf8V
1B6vFTlE0FceiKQsj6+ZFUaj8dlODoh05TmEmhUiqfM7n4reWzn3mduIhqplbRQ+
ebwWLv2ZG/lqdlXYJoqeUmoFUm1QcEhigfi1tnapbvLpHdpmYUzJhRekqlioAJ07
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16639728255379727630578057561167514424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-9-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29907095839824667874092014814790106013621915397648061349265269524506907028881816955869768337407767488120880619003497296761523732603400511073596565123602356736975528949459278144269785110821844796244216134645489846318356615997091076589038531387449388090723391965121643460282297434660205118578244073509468425744164772656810519508846679412280528395282720502761371724386128210217921529762134328312057694073002051120419519610662688818783538080145557109359790460645766222081369570015546232263820758997349953895348772104206810422133690626206048031361373432670724079406479084407589342005535289319119906310930024001217572453181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ae72907294f20ad3cf16a518836a9637731ebf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-9-s51.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.montblancnaturalresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.carrefoursa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mark3d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.huspy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.barschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.edenconveyancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pastiglieleone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.theroofgardens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.groupefaurie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.raiffeisencasa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.eutelsat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.wolford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.lge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.djoef.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.unicef.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eu-petcare.mars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.teamdeutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.qwic.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientes.amavir.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.chemical.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.interiorsurfaces.mkt.renolit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pool.mkt.renolit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.coorpid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.post.dierenbescherming.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.franck.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.renolit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.client.portdebarcelona.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.liverpool.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bricoio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novedades.ahoreca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazioni.groupama.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.flights.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fredmangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hondahub.honda.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.lavazza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.spierfonds.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.fmtsgroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailings.novissa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.autoretail.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vps.videndum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ctremails.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.boilerjuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vfonds.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.b2b.adidas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.hipto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ftpemails.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.morabanc.ad'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.wobi.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazioni.assolombarda.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.comune.genova.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.timenterprise.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lloydslistintelligence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.aofoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.idilia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.epc-informa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cunef.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.beck-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.condor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.innovazione.gov.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.fimmg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailpolpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.omv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r2-20230526-1.s51.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.shavve.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.dei.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.conforama.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsoneshotsolution.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.sogemedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uk.teethtoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.from.sawdays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.g.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicazioni.24orebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bluebiz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.iatiseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hellotv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.flucamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.upmmetsa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.bindingsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notificaciones.helloauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.inf.aegon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.alldent-holding.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.zeekr.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.finotivefunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.jcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.anagramhq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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