san-4-s50.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:5d:21:a4:bc:ed:94:68:d2:13:18:19:c8:f1:34:f1 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:5d:21:a4:bc:ed:94:68:d2:13:18:19:c8:f1:34:f1
Serial Number (int): 9788161949744121033755198860576240881
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:a9:4a:cb:56:10:36:34:68:db:b7:7d:2c:7c:2d:d3:10:cd:ad:d1
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 3e:e6:dc:b8:58:73:59:71:fe:f6:89:e6:db:1d:ee:4e:26:63:b6:43
Fingerprint (sha256): 37:1d:eb:c9:25:7b:3f:c3:45:3c:da:6b:4a:5c:5b:27:25:47:9f:0c:51:0f:d6:e8:29:1f:cd:be:b0:16:31:b6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-4-s50.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-4-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-4-s50.tlsprovisioning.exacttarget.com
image.mail1.palyance.com
image.marketing.legia.pl
image.marketingarco.com
image.mc.honda-benelux.com
image.mc.sunflowerloans.co.uk
image.mkt.aloepluslanzarote.com
image.news.europecomics.com
image.news.nutricia.email
image.news.savencia-fd-foodservice.com
image.newsletter.visionottica.it
image.petcloud.es
image.plataforma.rio.cloud
image.post.istitutomarangoni.com
image.segreteria.fondazionebracco.com
image.service.humboldtforum.org
image.service.teoxane.com
image.sfmc.universidadeuropea.es
image.southern.hellofresh.link
image.uk.hcp.incyte.com
image.update.sportfive.com
image.welcome.parachut.com
image.z.rankomat.pl
image.acist.braccogroup.com
image.at.hcp.incyte.com
image.basis.london
image.boletines.helvetia.es
image.bonghjornu.corsegsm.com
image.cibmc.absa.africa
image.cloud.bikeclub.com
image.com.compare-credit.fr
image.communication.audi.es
image.communication.skoda.es
image.communication.volkswagen.es
image.communication.volkswagengroup.es
image.communications.veygo.com
image.comunicacion.psafinance.es
image.contact.ademe.fr
image.de.hcp.incyte.com
image.digital.mybat.co.nz
image.e.brinks.com
image.e.dyson.com
image.e.dyson.it
image.e.dyson.nl
image.e.elissa-psychic.com
image.e.myastrology.com
image.e.nuk.com
image.e.rose-medium.com
image.email.alamy.com
image.email.bakken.nl
image.email.continental-tyres.co.uk
image.email.eslgaming.com
image.email.etam.com
image.email.groupehueberassurances.fr
image.email.henkpen.nl
image.email.irwintools.co.uk
image.email.li-vy.com
image.email.lumo.co.uk
image.email.maison123.com
image.email.mercedes-benz.dk
image.email.nicolishop.com
image.email.oetker.com
image.email.ouderenfonds.nl
image.email.sweet.tv
image.email.undiz.com
image.email-frieslandcampina.com
image.email-martat.fi
image.epost.svenskafreds.se
image.eu.connect.kia.com
image.eum.bausch.com
image.explore.uq.edu.au
image.fagus-grecon.com
image.hello.9e-store.fr
image.hello.collectorbd.com
image.hk.communication.sc.com
image.i.kinderfondsmamas.nl
image.info.aldi.pl
image.info.aldi.pt
image.info.bofrost.com
image.info.uloyola.es
image.info.univativ.de
image.innhold.hkraft.no
image.mail.banquepsafinance.de
image.mail.bigmachinery.nl
image.mail.chicagotown.com
image.mail.elteev.com
image.mail.fineconews.com
image.mail.koopmans.com
image.mail.lillydoo.com
image.mail.oranjefonds.nl
image.mail.pasquarelliauto.it
image.mail.psafinance.co.uk
image.mail.psa-finance.net
image.mail.psa-finance.nl
image.mail.watchcollecting.com
image.mail1.editions-heritage.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-4-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS+3W3pB4d5mG9o+hCK8
fPjOnNQu8+2hLnJpItclAniTv3cZUCHoPHkXIz01i5hf1ef1trzgLYDcz8QyOb7q
jCgVwP5eGBiZik8jTY4i1g27Iuex1vQdyP7BHiNAjZMCY9gUhsPvwWMcFIcNj7Nd
epJK0A2F3DMTrZwfJvmSgG79fHYtlrI0mgOxn9VK7URN55CduQ/n/UZVN69Fg8l2
MNMNvYG6G4QxeMFfbwZLhJq/g68J8BhEJyimijg2kI71VZYpP589Gt+AxswmHchs
0a17/GFDmeRQ4/QoSNs4a9hEYi0iNsE892tObUqT8S4biVxiVNi9PT3tKoHwXJ4L
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9788161949744121033755198860576240881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-4-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24892475833019821870755527552919843324969962419697459278242978467540541478413735591096510122318349170033676864875934311348162903419631776877701099253581434275260332780377243794786811968769715543993501006061430776541463491678365123503562491017332412921792650245063732061631673858353543650478392974592915993259583175032113160740272834100511630082161514940424412893247611350736883077145064084588327958326468776890064389411835313781195400517656179366797892920407540748123209190272214064513895053672593871585348186737761068186776782975211987870716330722040784606530183203721654938394576450925959272507616010060687172569989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9da94acb5610363468dbb77d2c7c2dd310cdadd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2639 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-4-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.palyance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.legia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingarco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.honda-benelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.sunflowerloans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.aloepluslanzarote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.europecomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.nutricia.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.savencia-fd-foodservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.visionottica.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.petcloud.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.plataforma.rio.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.post.istitutomarangoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.segreteria.fondazionebracco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.humboldtforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.teoxane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.universidadeuropea.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.southern.hellofresh.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uk.hcp.incyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.update.sportfive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.welcome.parachut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.z.rankomat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.acist.braccogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.at.hcp.incyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.basis.london'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.boletines.helvetia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bonghjornu.corsegsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cibmc.absa.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.bikeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.com.compare-credit.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.audi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.skoda.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.volkswagen.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.volkswagengroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.veygo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.psafinance.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.ademe.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.de.hcp.incyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.mybat.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.brinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.elissa-psychic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.myastrology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.nuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.rose-medium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.alamy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bakken.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.continental-tyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eslgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.etam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.groupehueberassurances.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.henkpen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.irwintools.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.li-vy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lumo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.maison123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mercedes-benz.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nicolishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.oetker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ouderenfonds.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sweet.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.undiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-frieslandcampina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-martat.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.epost.svenskafreds.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eu.connect.kia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eum.bausch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.explore.uq.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fagus-grecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.9e-store.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.collectorbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hk.communication.sc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.kinderfondsmamas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aldi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aldi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bofrost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.uloyola.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.univativ.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.innhold.hkraft.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.banquepsafinance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bigmachinery.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.chicagotown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.elteev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fineconews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.koopmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lillydoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.oranjefonds.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.pasquarelliauto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.psafinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.psa-finance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.psa-finance.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.watchcollecting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.editions-heritage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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