san-1-s50.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:23:85:60:70:cf:a7:46:5f:97:a5:98:82:52:f5:36 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:23:85:60:70:cf:a7:46:5f:97:a5:98:82:52:f5:36
Serial Number (int): 6830575570267544051074153193850205494
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7f:62:d2:6f:98:f5:ce:ad:de:dc:89:3a:8b:0b:00:9e:07:cc:ad:40
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 9c:5a:07:b6:7f:51:79:4f:f2:63:07:f1:d5:ae:9a:12:7e:e5:57:21
Fingerprint (sha256): 38:67:0f:92:8f:6e:90:43:6a:2c:c9:ad:47:e4:2a:e6:f0:84:1f:18:33:d6:a9:0a:ca:9f:60:8a:9d:e3:91:2d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-1-s50.tlsprovisioning.exacttarget.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-1-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-1-s50.tlsprovisioning.exacttarget.com
image.e-mails.barclaycard.co.uk
image.epost.mestergronn.no
image.experience.mixlabcocktails.com
image.experience.totalenergies.be
image.experience.totalenergies.com
image.experience.totalenergies.de
image.experience.totalenergies.fr
image.experience.totalenergies.lu
image.experience.totalenergies.nl
image.go.inigo.com
image.go.themodernhouse.com
image.grenadier.ineos.com
image.info.aldi.fr
image.info.nacex.com
image.info.tous.com
image.info.utilitas.ee
image.infoclient.financo.fr
image.iqosgreece.gr
image.le-club.ficofi.com
image.link.factor75.com
image.link.goodchop.com
image.m.arada.com
image.m.westfund.com.au
image.mail.aldi.nl
image.mail.boatinternational.com
image.mail.cbm-mail.de
image.mail.collectingcars.com
image.mail.prismea.fr
image.mail.purplebricks.co.uk
image.mail.raiffeisendigital.com
image.mail.scancar.be
image.mail.vermant.be
image.mailing.chanel.com
image.mailings.tribes.world
image.marketing.conti-tires.es
image.marketing.generalivitality.es
image.marketing.udalmeria.org
image.mc.vitesy.com
image.mce.viforpharma.com
image.mitele.mediaset.es
image.mitt.halebop.se
image.mon-club.totalenergies.fr
image.monomers-marketing.basf.com
image.mrkt.parfois.com
image.my.heineken.com
image.namaste.cityxerpa.com
image.nd.chiesi.com
image.news.baselworld.com
image.news.salonemilano.it
image.news.volkswagen-nutzfahrzeuge.de
image.news-aidexa.com
image.news-bancadiasti.it
image.newsletter.pelephone.co.il
image.newsletters.moethennessy.com
image.oceanhome.online
image.openbankingexcellence.online
image.payment.barclaycard.co.uk
image.propiteercapitalplc.com
image.sfmail.mundipharma.com
image.uk.chiesi.com
image.vwpkw.volkswagen-online.de
image.biztosito.nn.hu
image.ca.mail.bayer.com
image.cambridgescholars.com
image.client.oney.fr
image.comms.telia.no
image.comms.weforum.org
image.communication.beneteau.com
image.communication.jeanneau.com
image.communication.longines.com
image.communication.prestige-yachts.com
image.communication.raiffeisen.ua
image.communication.tissotwatches.com
image.communications.prodemar.com
image.comunicaciones.wanabet.es
image.crowdfarmers.crowdfarming.com
image.dialogue.santanderconsumer.dk
image.dm.grandoptical.cz
image.dm.grandoptical.sk
image.dm.ofotert.hu
image.dm.visionexpress.hu
image.e.crm.lego.com
image.em.bordallopinheiro.com
image.em.shoplc.com
image.em.tjc.co.uk
image.email.barclays.co.uk
image.email.liiva.ch
image.email.sandersondesigngroup.com
image.email.tooa.com
image.email.wmf.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-1-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo1yQjAxBJt7SzrOPAH1
G5uiOOHfEuayMRwHA7UKYOLevIkLTw5W2fpgQJyivMKZGW3er6G7nxklSl5QLcHJ
CMls/bEUOIAqQV+yk401TT+pSSz1wVtTjtplphQsZ9ARboOw8HKSHfWxnGrW2Qoz
TqGiXepJz9wcfuhMd7tVAkxn93KoB05U/CaLpNdz+vHlDl0sMJ3BvCoAC/ym0+zL
2ScwvVAJ+Skn9h0oTFO81Lf9Kmfvk6KuzI638v9tuc+IUl48nNx2Z45jcBmZn2Y3
kPO6lC4dqrJXa76R/151i1irjKeqKv+L1EEy3nYY+u0OeIxTC+HfDCX/5g/Lxtmm
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6830575570267544051074153193850205494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-1-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24055027724762419180266873156194391526230184317198137891075769515095842468976398291451272724868855075718156941031232228902971842304382711050243747826638265070243995320074094460133092437346524135396546809737672133852812413970720743339262799916480759414040601164628598686795641089660836982753255526743286769417851084432150055703277998697602682073828566935389198438970960947517998605168806937279696429986128367477847487676445338585105265737854264561000823709605612269643900343629374132684147952083050254483950082653901401932213123314677438843164386929967691427722596970658891220739891316971850136362125290358780024432371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f62d26f98f5ceaddedc893a8b0b009e07ccad40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-1-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-mails.barclaycard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.epost.mestergronn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.mixlabcocktails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.totalenergies.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.totalenergies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.totalenergies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.totalenergies.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.totalenergies.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.totalenergies.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.inigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.themodernhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.grenadier.ineos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aldi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.nacex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.tous.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.utilitas.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.infoclient.financo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.iqosgreece.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.le-club.ficofi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.factor75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.goodchop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.arada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.westfund.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.aldi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.boatinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cbm-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.collectingcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.prismea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.purplebricks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.raiffeisendigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.scancar.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vermant.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.chanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailings.tribes.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.conti-tires.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.generalivitality.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.udalmeria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.vitesy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mce.viforpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mitele.mediaset.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mitt.halebop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mon-club.totalenergies.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.monomers-marketing.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mrkt.parfois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.heineken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.namaste.cityxerpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nd.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.baselworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.salonemilano.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.volkswagen-nutzfahrzeuge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news-aidexa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news-bancadiasti.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.pelephone.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletters.moethennessy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.oceanhome.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.openbankingexcellence.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.payment.barclaycard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.propiteercapitalplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmail.mundipharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uk.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vwpkw.volkswagen-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.biztosito.nn.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ca.mail.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cambridgescholars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.client.oney.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.telia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.weforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.beneteau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.jeanneau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.longines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.prestige-yachts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.raiffeisen.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.tissotwatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.prodemar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.wanabet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crowdfarmers.crowdfarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dialogue.santanderconsumer.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.grandoptical.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.grandoptical.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.ofotert.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.visionexpress.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.crm.lego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.bordallopinheiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.shoplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.tjc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.barclays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.liiva.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sandersondesigngroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tooa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wmf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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