san-15-s50.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:ea:bf:e8:c3:13:46:f2:e4:b8:a6:f0:64:40:3c:90 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:ea:bf:e8:c3:13:46:f2:e4:b8:a6:f0:64:40:3c:90
Serial Number (int): 3877345838007863741242985345085095056
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 44:19:f4:5e:8c:bb:fd:15:24:d9:fd:27:16:6b:c2:ea:59:c1:ad:49
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 56:ef:b1:47:db:5a:f6:91:4b:94:3d:2e:2d:16:79:ea:d6:15:af:bd
Fingerprint (sha256): 3c:37:70:a8:1f:ad:ca:85:1e:ef:f8:6e:f5:35:6c:36:a3:c8:68:03:5a:aa:33:20:04:c0:9b:94:92:97:8a:6a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-15-s50.tlsprovisioning.exacttarget.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-15-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-15-s50.tlsprovisioning.exacttarget.com
image.weare.delirium.ro
image.loans.gemfinance.co.nz
image.communication.hamiltonwatch.com
image.email.moving.click
image.concierge.sodexo.com
image.s50-delegated-test.sfmc-tlsprovisioning.com
image.marketing.shekelgroup.co.il
image.email.rcdespanyol.com
image.communication.catamarans-lagoon.com
image.communication.excess-catamarans.com
image.descubre.aramon.com
image.content.greygoose.com
image.email.usm.com
image.communication.beneteau-group.com
image.mail.lorealactivecosmetics.com
image.park-enews.com
image.mail.nestlehealthscience-me.com
image.comunicacion.clubby.es
image.info.ottobock.com
image.chemetall-marketing.basf.com
image.e-crimecongress.com
image.news.qa.basf.com
image.communication.audi.co.za
image.communication.vw.co.za
image.communication.vwcv.co.za
image.email.pwc.se
image.allerganaestheticsgulf.com
image.moda.citymoda.it
image.mueller-fotoservice.cewe.de
image.infos.intencial.fr
image.e.dyson.co.jp
image.e.dyson.co.nz
image.e.dyson.com.au
image.info.wastemanaged.co.uk
image.cornmarketgroup.ie
image.mc.habyt.com
image.email.unisport.es
image.mail.danone.com.br
image.sfmc.europeia.pt
image.info.mondragon.edu
image.email.ballerette.com
image.news.scarpamondo.it
image.propstack.de
image.email.rejmesbil.se
image.info.fundacion-sm.com
image.allerganaesthetics.pl
image.eg.mercedes-benz.com.eg
image.partenaire.generali.fr
image.email.pmiopen.com
image.email.dentaglobal.com
image.mondoconvenienza.eu
image.contact.mobilize-fs.fr
image.india.gskpro.com
image.mueller.cewe-fotoservice.at
image.community.rts.ch
image.email.onlinesim.it
image.email.mayfairworktops.co.uk
image.your.ch.genesis.com
image.your.de.genesis.com
image.your.uk.genesis.com
image.br.gskpro.com
image.community.rtr.ch
image.mkt.newsspot.com.br
image.alicepizza.pizza
image.allerganaesthetics.co.th
image.lp.audi.pt
image.lp.cupraofficial.pt
image.lp.seat.pt
image.lp.skoda.pt
image.email.lorealprofessionalproducts.com
image.mc.manstein.at
image.info.meinreemtsma.de
image.mktg.gianvitorossi.com
image.email.maxi.rs
image.mail.vanhartelingsma.nl
image.club.relxwithme.com
image.clubid.relx-i.com
image.clubmy.i-relx.com
image.clubph.relxnews.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-15-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOQTCCDSmgAwIBAgIQAuq/6MMTRvLkuKbwZEA8kDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAxMjgwMDAwMDBa
Fw0yMzExMTYyMzU5NTlaMIGOMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEdMBsGA1UEChMUU0FMRVNGT1JD
RS5DT00sIElOQy4xMzAxBgNVBAMTKnNhbi0xNS1zNTAudGxzcHJvdmlzaW9uaW5n
LmV4YWN0dGFyZ2V0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALukX08DZ1VcKylZ41RqHHatz3kRIrtpmdbdLFAGrk2Fntcj/HBO7yljB+QyzI64
DOeDWLu2uGfFY77ACzGmQHO2zBtZnS2mJ/HG6gugZ098GiHvFbEaK9GeQqwfQf7s
sMtHyxqJ1dbqw/DslpFNOzENgzWjB/FZZ3DIoPxfDF03+Vrl81bqxGHaqoz5coXY
tEXv05CammoQBW7WHSWDMwy9jI8lX1itTnn4Od3zVIQ03TTEEHMB+DlYcOEXjWWU
m4iSojBDIoHvXpV70fbUb6r7KJ4IAkDBirzrwbD2I98d88U0rMi75D2ylwcSbTA+
J95TaKeW8mElBZOJYHQH3ZMCAwEAAaOCCtcwggrTMB8GA1UdIwQYMBaAFLdrouqo
qoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBREGfRejLv9FSTZ/ScWa8LqWcGtSTCC
CO0GA1UdEQSCCOQwggjggipzYW4tMTUtczUwLnRsc3Byb3Zpc2lvbmluZy5leGFj
dHRhcmdldC5jb22CF2ltYWdlLndlYXJlLmRlbGlyaXVtLnJvghxpbWFnZS5sb2Fu
cy5nZW1maW5hbmNlLmNvLm56giVpbWFnZS5jb21tdW5pY2F0aW9uLmhhbWlsdG9u
d2F0Y2guY29tghhpbWFnZS5lbWFpbC5tb3ZpbmcuY2xpY2uCGmltYWdlLmNvbmNp
ZXJnZS5zb2RleG8uY29tgjFpbWFnZS5zNTAtZGVsZWdhdGVkLXRlc3Quc2ZtYy10
bHNwcm92aXNpb25pbmcuY29tgiFpbWFnZS5tYXJrZXRpbmcuc2hla2VsZ3JvdXAu
Y28uaWyCG2ltYWdlLmVtYWlsLnJjZGVzcGFueW9sLmNvbYIpaW1hZ2UuY29tbXVu
aWNhdGlvbi5jYXRhbWFyYW5zLWxhZ29vbi5jb22CKWltYWdlLmNvbW11bmljYXRp
b24uZXhjZXNzLWNhdGFtYXJhbnMuY29tghlpbWFnZS5kZXNjdWJyZS5hcmFtb24u
Y29tghtpbWFnZS5jb250ZW50LmdyZXlnb29zZS5jb22CE2ltYWdlLmVtYWlsLnVz
bS5jb22CJmltYWdlLmNvbW11bmljYXRpb24uYmVuZXRlYXUtZ3JvdXAuY29tgiRp
bWFnZS5tYWlsLmxvcmVhbGFjdGl2ZWNvc21ldGljcy5jb22CFGltYWdlLnBhcmst
ZW5ld3MuY29tgiVpbWFnZS5tYWlsLm5lc3RsZWhlYWx0aHNjaWVuY2UtbWUuY29t
ghxpbWFnZS5jb211bmljYWNpb24uY2x1YmJ5LmVzghdpbWFnZS5pbmZvLm90dG9i
b2NrLmNvbYIiaW1hZ2UuY2hlbWV0YWxsLW1hcmtldGluZy5iYXNmLmNvbYIZaW1h
Z2UuZS1jcmltZWNvbmdyZXNzLmNvbYIWaW1hZ2UubmV3cy5xYS5iYXNmLmNvbYIe
aW1hZ2UuY29tbXVuaWNhdGlvbi5hdWRpLmNvLnphghxpbWFnZS5jb21tdW5pY2F0
aW9uLnZ3LmNvLnphgh5pbWFnZS5jb21tdW5pY2F0aW9uLnZ3Y3YuY28uemGCEmlt
YWdlLmVtYWlsLnB3Yy5zZYIgaW1hZ2UuYWxsZXJnYW5hZXN0aGV0aWNzZ3VsZi5j
b22CFmltYWdlLm1vZGEuY2l0eW1vZGEuaXSCIWltYWdlLm11ZWxsZXItZm90b3Nl
cnZpY2UuY2V3ZS5kZYIYaW1hZ2UuaW5mb3MuaW50ZW5jaWFsLmZyghNpbWFnZS5l
LmR5c29uLmNvLmpwghNpbWFnZS5lLmR5c29uLmNvLm56ghRpbWFnZS5lLmR5c29u
LmNvbS5hdYIdaW1hZ2UuaW5mby53YXN0ZW1hbmFnZWQuY28udWuCGGltYWdlLmNv
cm5tYXJrZXRncm91cC5pZYISaW1hZ2UubWMuaGFieXQuY29tghdpbWFnZS5lbWFp
bC51bmlzcG9ydC5lc4IYaW1hZ2UubWFpbC5kYW5vbmUuY29tLmJyghZpbWFnZS5z
Zm1jLmV1cm9wZWlhLnB0ghhpbWFnZS5pbmZvLm1vbmRyYWdvbi5lZHWCGmltYWdl
LmVtYWlsLmJhbGxlcmV0dGUuY29tghlpbWFnZS5uZXdzLnNjYXJwYW1vbmRvLml0
ghJpbWFnZS5wcm9wc3RhY2suZGWCGGltYWdlLmVtYWlsLnJlam1lc2JpbC5zZYIb
aW1hZ2UuaW5mby5mdW5kYWNpb24tc20uY29tghtpbWFnZS5hbGxlcmdhbmFlc3Ro
ZXRpY3MucGyCHWltYWdlLmVnLm1lcmNlZGVzLWJlbnouY29tLmVnghxpbWFnZS5w
YXJ0ZW5haXJlLmdlbmVyYWxpLmZyghdpbWFnZS5lbWFpbC5wbWlvcGVuLmNvbYIb
aW1hZ2UuZW1haWwuZGVudGFnbG9iYWwuY29tghlpbWFnZS5tb25kb2NvbnZlbmll
bnphLmV1ghxpbWFnZS5jb250YWN0Lm1vYmlsaXplLWZzLmZyghZpbWFnZS5pbmRp
YS5nc2twcm8uY29tgiFpbWFnZS5tdWVsbGVyLmNld2UtZm90b3NlcnZpY2UuYXSC
FmltYWdlLmNvbW11bml0eS5ydHMuY2iCGGltYWdlLmVtYWlsLm9ubGluZXNpbS5p
dIIhaW1hZ2UuZW1haWwubWF5ZmFpcndvcmt0b3BzLmNvLnVrghlpbWFnZS55b3Vy
LmNoLmdlbmVzaXMuY29tghlpbWFnZS55b3VyLmRlLmdlbmVzaXMuY29tghlpbWFn
ZS55b3VyLnVrLmdlbmVzaXMuY29tghNpbWFnZS5ici5nc2twcm8uY29tghZpbWFn
ZS5jb21tdW5pdHkucnRyLmNoghlpbWFnZS5ta3QubmV3c3Nwb3QuY29tLmJyghZp
bWFnZS5hbGljZXBpenphLnBpenphgh5pbWFnZS5hbGxlcmdhbmFlc3RoZXRpY3Mu
Y28udGiCEGltYWdlLmxwLmF1ZGkucHSCGWltYWdlLmxwLmN1cHJhb2ZmaWNpYWwu
cHSCEGltYWdlLmxwLnNlYXQucHSCEWltYWdlLmxwLnNrb2RhLnB0gippbWFnZS5l
bWFpbC5sb3JlYWxwcm9mZXNzaW9uYWxwcm9kdWN0cy5jb22CFGltYWdlLm1jLm1h
bnN0ZWluLmF0ghppbWFnZS5pbmZvLm1laW5yZWVtdHNtYS5kZYIcaW1hZ2UubWt0
Zy5naWFudml0b3Jvc3NpLmNvbYITaW1hZ2UuZW1haWwubWF4aS5yc4IdaW1hZ2Uu
bWFpbC52YW5oYXJ0ZWxpbmdzbWEubmyCGWltYWdlLmNsdWIucmVseHdpdGhtZS5j
b22CF2ltYWdlLmNsdWJpZC5yZWx4LWkuY29tghdpbWFnZS5jbHVibXkuaS1yZWx4
LmNvbYIZaW1hZ2UuY2x1YnBoLnJlbHhuZXdzLmNvbTAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+
oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1
NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZn
gQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BT
MH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNl
cnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAD3uFMzEdW5nJV07
mNJ5LnsgwyxzT1uBlviJ95/grdhz2E830+vNjYLyfa5LALAYpaH/hbtKN4sCE2TV
jGJE4ekqhrJhbSKV4SjAw7Am0MwuHnrel/VwvGhDnS90U/8PW5k6Kc7xXSNBY8WH
vdC42baaFVJynOC7SjMQmu/VQ26mB0KLWpt+6BQy/v80er/tGwncXCKEUZThpXbK
083CRcLa44yLRbs8B4+JqLZbNEbgwqxN11xn1xMV6JiJCS4ITW2Prvugb9nyC1q5
qi/s1mVJCBOLrfU+pj5/r7Jfj/qtWcgnVO7SgJhiS9ijfCdJdWDmKttuLZoiIgYC
h/k12HM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6RfTwNnVVwrKVnjVGoc
dq3PeREiu2mZ1t0sUAauTYWe1yP8cE7vKWMH5DLMjrgM54NYu7a4Z8VjvsALMaZA
c7bMG1mdLaYn8cbqC6BnT3waIe8VsRor0Z5CrB9B/uywy0fLGonV1urD8OyWkU07
MQ2DNaMH8VlncMig/F8MXTf5WuXzVurEYdqqjPlyhdi0Re/TkJqaahAFbtYdJYMz
DL2MjyVfWK1Oefg53fNUhDTdNMQQcwH4OVhw4ReNZZSbiJKiMEMige9elXvR9tRv
qvsonggCQMGKvOvBsPYj3x3zxTSsyLvkPbKXBxJtMD4n3lNop5byYSUFk4lgdAfd
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3877345838007863741242985345085095056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-15-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23687618030447013815340324922263941188321093780953173712067956097060536277912950386210745466346892461953982232503014247366778616000403095208027211924253130469766473865695563876509249025509037304007440357437190858521213271855916801642399793378182913070354670419458158054585850403438630433785766000052920885725348481969523685532783144510173964814235588978139181883209106875569799362892230604973028277060515947934303742040450256022702230532350158416829867567200666240150162061254006504674398370688599687695186044826293316949875998576984513066810967242694846877021624793646284309949417170402240629167521947471889933262227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4419f45e8cbbfd1524d9fd27166bc2ea59c1ad49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-15-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.weare.delirium.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.loans.gemfinance.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.hamiltonwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.moving.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.concierge.sodexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s50-delegated-test.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.shekelgroup.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rcdespanyol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.catamarans-lagoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.excess-catamarans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.descubre.aramon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.greygoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.usm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.beneteau-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lorealactivecosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.park-enews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nestlehealthscience-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.clubby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.ottobock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.chemetall-marketing.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-crimecongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.qa.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.audi.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.vw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.vwcv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pwc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaestheticsgulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.moda.citymoda.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mueller-fotoservice.cewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.infos.intencial.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.wastemanaged.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cornmarketgroup.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.habyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.unisport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.danone.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.europeia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mondragon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ballerette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.scarpamondo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.propstack.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rejmesbil.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fundacion-sm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaesthetics.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eg.mercedes-benz.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.partenaire.generali.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pmiopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dentaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mondoconvenienza.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.india.gskpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mueller.cewe-fotoservice.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.rts.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.onlinesim.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mayfairworktops.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.ch.genesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.de.genesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.uk.genesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.br.gskpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.rtr.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.newsspot.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.alicepizza.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaesthetics.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.audi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.cupraofficial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.seat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.skoda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lorealprofessionalproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.manstein.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.meinreemtsma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.gianvitorossi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.maxi.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vanhartelingsma.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.club.relxwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubid.relx-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubmy.i-relx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubph.relxnews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003dee14ccc4756e67255d3b98d2792e7b20c32c734f5b8196f889f79fe0add873d84f37d3ebcd8d82f27dae4b00b018a5a1ff85bb4a378b021364d58c6244e1e92a86b2616d2295e128c0c3b026d0cc2e1e7ade97f570bc68439d2f7453ff0f5b993a29cef15d234163c587bdd0b8d9b69a1552729ce0bb4a33109aefd5436ea607428b5a9b7ee81432feff347abfed1b09dc5c22845194e1a576cad3cdc245c2dae38c8b45bb3c078f89a8b65b3446e0c2ac4dd75c67d71315e89889092e084d6d8faefba06fd9f20b5ab9aa2fecd6654908138badf53ea63e7fafb25f8ffaad59c82754eed28098624bd8a37c27497560e62adb6e2d9a2222060287f935d873