san-12-s10.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:62:13:19:64:84:66:dd:df:54:d0:4e:3e:7e:22:20 was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:62:13:19:64:84:66:dd:df:54:d0:4e:3e:7e:22:20
Serial Number (int): 15130740423365584912412408459858682400
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 28:8d:dd:19:c4:9d:41:ae:1f:75:a6:61:b8:d1:14:8c:d3:05:c5:87
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): c7:66:e2:1f:c6:e7:7e:13:26:ed:43:b4:c8:33:15:2c:19:4f:b9:35
Fingerprint (sha256): 38:ea:47:5d:7c:fd:f7:cc:f7:7c:73:30:ee:a3:51:04:8f:95:1b:13:2c:94:9c:c2:86:2d:1a:34:e8:d5:fb:99

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-12-s10.tlsprovisioning.exacttarget.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-12-s10.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-12-s10.tlsprovisioning.exacttarget.com
image.email.broadviewfcu.com
image.email.courtsopticalpromos.com
image.email.courtspromos.com
image.email.creand.com
image.email.emailclickview.com
image.email.goodfeetnw.com
image.email.i-car.com
image.email.luckydollarpromos.com
image.email.maxmara-me.com
image.email.opticapromo.com
image.email.pensionbee.com
image.email.radioshackpromos.com
image.email.readycashpromos.com
image.email.readyfinancepromos.com
image.email.tropigaspromos.com
image.email.walls.com
image.email.weekendmaxmara-me.com
image.emails.onlok.org
image.email-sugarbugdental.com
image.emarketing.cybertex.edu
image.fiat.astara.com
image.harbourrockcapital.uk
image.info.alpinecars.co.il
image.info.bariguimove.com.br
image.info.sangpharma.com
image.jeep.astara.com
image.mail.companhiadasletras.com.br
image.mail.cortilia.it
image.mail.dolomitienergia.it
image.mail.expat.hsbc.com
image.mail.kodiakboots.com
image.mail.parqueshoppingba.com.br
image.mail01.hsbc.co.uk
image.mail-globalchristianrelief.org
image.maison.boucheron.com
image.marketing.kelseycare.com
image.mc.charlotte.edu
image.messaging.hangseng.com
image.messaging.hsbc.bm
image.messaging.hsbc.com.hk
image.mkt.stz.com.br
image.my.oviahealth.com
image.newsletter.oasishoteles.com
image.p.myrocket.com
image.preferences.gemvision.com
image.r2-20230526-1.s10.sfmc-tlsprovisioning.com
image.sac.consorciocitroen.com.br
image.sac.stellantisconsorcio.com.br
image.speakupinbe.com
image.store.charly.com
image.test.activehealth.com
image.trips.efultimatebreak.com
image.us-dtc.ipsen.com
image.wmc.rbc.com
image.auto.padovastar.it
image.auto.trivellato.it
image.carrierenterprise.net
image.club.mountgayrum.com
image.cmb.hangseng.com
image.comms.crea.ca
image.comms.prf.org
image.comunicacao.inspirali.com
image.comunicacionesjamar.com
image.connect.montefioreeinstein.org
image.crm-grupowish.com
image.e.amrock.com
image.e.jazzpharma.com
image.e.kingsteamstore.com
image.e.multiopticas-opticas.com
image.e.online.millersville.edu
image.e.online.uno.edu
image.e.onlinedegrees.etsu.edu
image.e.onlinedegrees.jsu.edu
image.e.pennplay.com
image.e.quickenloans.com
image.e.raa.nsw.gov.au
image.e.rocketmortgage.ca
image.edu.companhiadasletras.com.br
image.em.aetnainternational.com
image.em.bulldogshoppingnetwork.com
image.em.christopherandbanks.com
image.email.ar-hotels.com
image.email.ashleycaribbeanpromo.com
image.email.averahealthplans.com
image.email.barprobono.org.uk

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-12-s10.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tQeL/xxz2rRbXM3Zp1A
sGsiBHqhIdGQQUQmThgZJP71RVRhxLxTuq/Gl1MoPijNtx672xlpwgxiWhpBBxPm
KVw/OTKJY9XQrZC4AbQ8EzBmEjZczxAUaT4XJVWPiWN8QwGOxkEIjN1SsPPNY6E/
8putyf5FXAD59WGIc1QPvMVwlEdfsThX0fNC54bimAQmvYBJWreSHUDqXdSdXJMX
1QlRIGeWibd6uo7GQ6BvSUQRBsyXZuXssQlcclbrOU9z8BSJxpQFeJqwSX1ft/lp
2m0kDVvDXInyHWlib28Bdi6ZZldxSbgaATK/GJ7x5rb8K8MzPA1HM/JylX9xeYGa
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15130740423365584912412408459858682400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-12-s10.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27624549727276995386418674916328252563342965215173779527315757611749446474868547576283808691019785558987964922743747896033270864004515276637378087386674212744024385944426003943911566444596199084190646184303859445144059218046104879690312476991519778052477921206875464353319727135991456093552571862598858403598021948093320848845212727333857083788923317295416282014816771141598209674319203932657931079840047848203653138533303921385878934274762612182762577801870660148862539554774429245474524260324664898124728658666719031790543843116907019667952020226812872536120901299907245282057136058346063992476761192922300788349451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							288ddd19c49d41ae1f75a661b8d1148cd305c587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2539 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-12-s10.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.broadviewfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.courtsopticalpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.courtspromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.creand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.emailclickview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.goodfeetnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.i-car.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.luckydollarpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.maxmara-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.opticapromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pensionbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.radioshackpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.readycashpromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.readyfinancepromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tropigaspromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.walls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.weekendmaxmara-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.onlok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-sugarbugdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emarketing.cybertex.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fiat.astara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.harbourrockcapital.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.alpinecars.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bariguimove.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.sangpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jeep.astara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.companhiadasletras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cortilia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dolomitienergia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.expat.hsbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kodiakboots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.parqueshoppingba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail01.hsbc.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-globalchristianrelief.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maison.boucheron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.kelseycare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.charlotte.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messaging.hangseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messaging.hsbc.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messaging.hsbc.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.stz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.oviahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.oasishoteles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.p.myrocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.preferences.gemvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r2-20230526-1.s10.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sac.consorciocitroen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sac.stellantisconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.speakupinbe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.store.charly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.test.activehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.trips.efultimatebreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us-dtc.ipsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wmc.rbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.auto.padovastar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.auto.trivellato.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.carrierenterprise.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.club.mountgayrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cmb.hangseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.crea.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.prf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.inspirali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacionesjamar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.montefioreeinstein.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm-grupowish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.amrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.jazzpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.kingsteamstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.multiopticas-opticas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.online.millersville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.online.uno.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.onlinedegrees.etsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.onlinedegrees.jsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.pennplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.quickenloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.raa.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.rocketmortgage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.companhiadasletras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.aetnainternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.bulldogshoppingnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.christopherandbanks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ar-hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ashleycaribbeanpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.averahealthplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.barprobono.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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