san-11-s7.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:27:5f:b9:bd:0b:e1:f4:72:8e:52:5a:1f:a6:a2:67 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:27:5f:b9:bd:0b:e1:f4:72:8e:52:5a:1f:a6:a2:67
Serial Number (int): 16155177071531292881919908153964012135
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:24:27:9d:8d:65:48:ef:a5:c9:7e:f9:7e:5e:4e:82:6a:9d:13:88
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 08:28:4e:1b:9c:64:f3:9c:c0:26:ca:2c:99:4f:f9:13:b2:6a:35:ae
Fingerprint (sha256): 39:54:ed:f8:d0:17:49:f3:e1:54:ff:b9:0d:c9:95:1e:a8:6f:a5:9f:3a:ea:c3:71:50:74:fc:c2:2f:cb:51:fc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-11-s7.tlsprovisioning.exacttarget.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-11-s7.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-11-s7.tlsprovisioning.exacttarget.com
image.gl2.golfdigest.co.jp
image.news.larocheposay.co.id
image.mail.kenvue.com.au
image.mail.kenvue.com.vn
image.ocrm1.pearson.com
image.news.kiehls.co.id
image.news.lancome.co.id
image.news.yslbeauty.co.id
image.communications.purinamills.com
image.schoolspecialtyenews.ca
image.mail.redepromotiva.com.br
image.comms.cencora.com
image.cdcentricos.io
image.mail.skinbetter.ca
image.smc.margarethowell.jp
image.smc.tokyostyle.co.jp
image.smc.tsigs.com
image.mail.kenvue.kr
image.mail.kenvue.co.id
image.mail.kenvue.com.hk
image.news.maybelline.co.id
image.email.glenglassaugh.com
image.emails.ccleaner.com
image.email.anmum.com.my
image.e.operaballet.be
image.email.kenvuepediatrics.com
image.mail.lorealsalonshop.co.id
image.sfmc-global-dev.nestle.com
image.sfmc-global-qa.nestle.com
image.mail.kenvue.com.sg
image.mail.kenvue.jp
image.gigisplayhouse-email.org
image.emails.keepcalling.com
image.business.mapfre.com
image.iconclinicalresearch.com
image.email.jnjinstitute.com
image.mail-skillpath.com
image.email.mawdy.com
image.email.mawdy.com.mx
image.latam.bravoautoinchcape.com
image.mail.kenvue.com.my
image.mail.kenvue.com.ph
image.mail.kenvue.com.tw
image.mail.kenvue.in
image.email.tandemhcp.com
image.insurancewithplymouthrock.com
image.plymouthrockautoinsurance.com
image.transactional.vanguard.com
image.mercedesbenzph.inchcape-ph.com
image.newsolx.com.br
image.ocrm2.pearson.com
image.mail.yslbeauty.com.mx
image.news.kerastase.in
image.news.lancome.in
image.email.texashealthhuguley.org
image.mc2.copeland.com
image.email.ijm.ca
image.info.guardianlife.com
image.relacionamento.hospitalsiriolibanes.org.br
image.email.transport.nsw.gov.au
image.smc.adore2005.com
image.hola.mibelleza.uy
image.email.guardianprotectsme.com
image.mail.kiehls.ca
image.email.kiehls.co.kr
image.email.biotherm.co.kr
image.email.helenarubinstein.co.kr
image.email.lancome.co.kr
image.smc.humanwoman.net
image.smc.jillstuart.jp
image.smc.rosebud-web.com
image.smc.saneibd.com
image.mail.zurich.co.jp
image.email.medische-informatie.nl
image.email.fertilitysavings.com
image.email.urbandecay.co.kr
image.email.yslbeautykr.com
image.email.atxtv.com
image.r202311a.s7.sfmc-tlsprovisioning.com
image.mail.stillwater.com
image.e.cruiseabout.com.au
image.sfmc-test-jp.msd.com
image.areaempresa.uoc.edu

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-11-s7.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK9EHrJiyD4rgEycRbvn
TvUJbIIp+N0b1lxuaOrhgi6eQ5Lwd8CeBYJSY+4oFsYh6ihMMo1slise6BtFhMLP
U3a9UFkKLrDVBFRvyaa3Vxpk8wzsp4Zc84QYQoj8HKEkk+/veUdTKCQ+c2lKUKz3
3RRDE5j3jlZZqqfS2YzfDvrDFlemllnT7woYTJUNoVTXYAx+lUTYrAqQETsRXYZy
n/cUltNgyRe2CuTihUr0sPYiIqhtjDvuitCnOYMb+b958GXBv2iC+kY7PMa5R5sk
n9c/GfRvZfs/AO6889DkyV3p/yKnYN+Zo1zDMjv34NF7BLq9OTHu3xBSU+I2JPcF
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16155177071531292881919908153964012135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-11-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23819228265448597554087683863583549032817961647679589231596663318911622332704109805574059736583180867398587383797989407502947361303462201366289258851800354038994969017290324466572568398301116183578345165484934527084671824125102511666118449148328817282222151938460581865021502063474694751782639199492890309069085590118555998172747348429199081874387307338789047796124214736524799887065169101898388478553469809678653818724036053246910140796890304941397102868402422898634401992703073874645470819610634075669204218334972676342210726753600846977488138814128744815395151529750336599690024657385956996341584121442578527094031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb24279d8d6548efa5c97ef97e5e4e826a9d1388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-11-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gl2.golfdigest.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.larocheposay.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ocrm1.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.kiehls.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.lancome.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yslbeauty.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.purinamills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.schoolspecialtyenews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.redepromotiva.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.cencora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cdcentricos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.skinbetter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.margarethowell.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.tokyostyle.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.tsigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.maybelline.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.glenglassaugh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.ccleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.anmum.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.operaballet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kenvuepediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lorealsalonshop.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc-global-dev.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc-global-qa.nestle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gigisplayhouse-email.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.keepcalling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.business.mapfre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.iconclinicalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jnjinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-skillpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mawdy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mawdy.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.latam.bravoautoinchcape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kenvue.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tandemhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insurancewithplymouthrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.plymouthrockautoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.transactional.vanguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mercedesbenzph.inchcape-ph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsolx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ocrm2.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.yslbeauty.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.kerastase.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.lancome.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.texashealthhuguley.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc2.copeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ijm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.guardianlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.hospitalsiriolibanes.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.transport.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.adore2005.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hola.mibelleza.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.guardianprotectsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kiehls.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kiehls.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.biotherm.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.helenarubinstein.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lancome.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.humanwoman.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.jillstuart.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.rosebud-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.saneibd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.zurich.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.medische-informatie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fertilitysavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.urbandecay.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.yslbeautykr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.atxtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r202311a.s7.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stillwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc-test-jp.msd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.areaempresa.uoc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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