secure-usea2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:be:1b:25:3e:9a:0f:67:a1:8f:d5:2b:be:cd:07:a2 was issued on by DigiCert Inc.

With 113 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:be:1b:25:3e:9a:0f:67:a1:8f:d5:2b:be:cd:07:a2
Serial Number (int): 15608594932631321406542297238787131298
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:86:e5:3d:29:8d:32:57:ac:2d:c4:16:5c:92:9e:e2:03:6f:fa:e5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2c:a8:04:b9:b7:d8:d0:9b:58:4c:fa:ec:7d:89:01:d8:58:1c:ed:e5
Fingerprint (sha256): 3f:92:c1:13:a6:0a:3e:69:56:ee:32:d5:00:b8:08:e8:4a:d9:ab:2b:1b:03:09:12:4b:9c:3e:8a:5f:39:11:e3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate secure-usea2-1.tessituranetwork.com

113

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-usea2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-usea2-1.tessituranetwork.com
*.tn.services
*.tnhs.cloud
t-secure-usea2-1.tessituranetwork.com
cst1.tessituranetwork.com
my.hubbardstreetdance.com
shop.slso.org
tickets.nashvillesymphony.org
tix.eldomad.com
cart.tpac.org
tickets.grandtheater.org
my.alysstephens.org
tickets.asf.net
cart.mnhs.org
my.austinopera.org
my.mnzoo.org
my.tulsabotanic.org
tickets.dallasopera.org
cart.joffrey.org
secure.countrymusichalloffame.org
tickets.thegilmore.org
my.dacamera.com
my.desmoinesperformingarts.org
my.austinsymphony.org
tickets.mercuryhouston.org
my.balletaustin.org
my.wittemuseum.org
secure.walkerart.org
tickets.austintheatre.org
my.tulsaballet.org
my.grantparkmusicfestival.com
tickets.perotmuseum.org
tickets.liedcenter.org
my.tulsasymphony.org
my.harristheaterchicago.org
tickets.houstonfirsttheaters.com
ticketing.kcballet.org
my.childrenstheatre.org
orders.cocastl.org
access.fwsymphony.org
ticketing.kcrep.org
tickets.kauffmancenter.org
ticketing.wilson-center.com
experience.mcachicago.org
tickets.waltonartscenter.org
cart.zoosociety.org
tickets.dct.org
my.dallaszoo.com
securesite.guthrietheater.org
cart.houstonsymphony.org
cart.nelson-atkins.org
my.thecarsoncenter.org
ticketing.graceland.com
tickets.overture.org
buy.amptickets.com
ticketing.opera-stl.org
tickets.touhill.org
tickets.kcopera.org
tickets.texasballettheater.org
tickets.kcsymphony.org
tickets.zachtheatre.org
buy.rwb.org
tickets.kcstarlight.com
My.TheSKyPAC.com
my.stagestheatre.org
my.writerstheatre.org
my.philbrook.org
my.mnopera.org
my.tuts.com
buy.fwmuseum.org
cart.broadwaytheatrecenter.com
my.theworldwar.org
my.ahhatulsa.org
my.thehermitage.com
naramptest.zoosociety.org
naramptest.perotmuseum.org
my.hnoc.org
billetterie.droitsdelapersonne.ca
ticketing.humanrights.ca
naramptest.dallaszoo.com
my.oxfordpac.org
my.thehobbycenter.org
my.desmoinesartcenter.org
shop.stlsymphony.org
my.dallastheatercenter.org
members.kera.org
my.thinkeryaustin.org
tickets.wrightwood659.org
secure.kimbellart.org
my.woodyguthriecenter.org
tix.theatre2.org
my.gilcrease.org
my.wso.ca
cart.ticketomaha.com
my.jazzstl.org
order.cso.org
tickets.milwaukeerep.org
tickets.crystalbridges-themomentary.org
my.mfah.org
tickets.milwaukeerep.com
tnewdev.mfah.org
tickets.royalmtc.ca
my.thelongcenter.org
tickets.hjseries.org
secure.hbg.org
secure.dallasopera.org
secure.dallassymphony.org
secure.firststage.org
my.smm.org
my.oklahomacontemporary.org
my.arkansasartscenter.org
ticket.artsiowa.com
my.noma.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
tessituranetwork.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-usea2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQPTCCDyWgAwIBAgIQC74bJT6aD2ehj9Urvs0HojANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAxMDE5MDAwMDAwWhcN
MjEwOTIyMjM1OTU5WjB+MQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxDzAN
BgNVBAcTBkRhbGxhczEgMB4GA1UEChMXVGVzc2l0dXJhIE5ldHdvcmssIEluYy4x
LDAqBgNVBAMTI3NlY3VyZS11c2VhMi0xLnRlc3NpdHVyYW5ldHdvcmsuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3OuN62WguQDf3F3c3eA81Z
faTzTWkLL/iNkJqWqqK2gZpRMxVOaKrcHKbiuwg4yXaVb5XY3EOyVDV2vZUOAmlr
KL1Wacooq8ghlMIg1fhjx2VJ54t0CssuCyKJ5NTssoibeCKH70sGcSTVZaVbAJY5
RT7xH2cZ0Zfq8eyuBZjixhSXnbClDW5a49SzXvnGIa024uEDYN9rrePollA9AqoG
qy96x/exT2ZgP2yHtraRtEdcdHGKl70CSitkrHIIKOlWkGgpG0A7qq+/Vr0h6pwx
OCOpw34dfxkhcT3HGgCM7lPqtbC7ZX7361m97UwxKKSN76o8RdcBHtE7HT1vZQID
AQABo4IM5jCCDOIwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYD
VR0OBBYEFEyG5T0pjTJXrC3EFlySnuIDb/rlMIIKIQYDVR0RBIIKGDCCChSCI3Nl
Y3VyZS11c2VhMi0xLnRlc3NpdHVyYW5ldHdvcmsuY29tgg0qLnRuLnNlcnZpY2Vz
ggwqLnRuaHMuY2xvdWSCJXQtc2VjdXJlLXVzZWEyLTEudGVzc2l0dXJhbmV0d29y
ay5jb22CGWNzdDEudGVzc2l0dXJhbmV0d29yay5jb22CGW15Lmh1YmJhcmRzdHJl
ZXRkYW5jZS5jb22CDXNob3Auc2xzby5vcmeCHXRpY2tldHMubmFzaHZpbGxlc3lt
cGhvbnkub3Jngg90aXguZWxkb21hZC5jb22CDWNhcnQudHBhYy5vcmeCGHRpY2tl
dHMuZ3JhbmR0aGVhdGVyLm9yZ4ITbXkuYWx5c3N0ZXBoZW5zLm9yZ4IPdGlja2V0
cy5hc2YubmV0gg1jYXJ0Lm1uaHMub3JnghJteS5hdXN0aW5vcGVyYS5vcmeCDG15
Lm1uem9vLm9yZ4ITbXkudHVsc2Fib3RhbmljLm9yZ4IXdGlja2V0cy5kYWxsYXNv
cGVyYS5vcmeCEGNhcnQuam9mZnJleS5vcmeCIXNlY3VyZS5jb3VudHJ5bXVzaWNo
YWxsb2ZmYW1lLm9yZ4IWdGlja2V0cy50aGVnaWxtb3JlLm9yZ4IPbXkuZGFjYW1l
cmEuY29tgh5teS5kZXNtb2luZXNwZXJmb3JtaW5nYXJ0cy5vcmeCFW15LmF1c3Rp
bnN5bXBob255Lm9yZ4IadGlja2V0cy5tZXJjdXJ5aG91c3Rvbi5vcmeCE215LmJh
bGxldGF1c3Rpbi5vcmeCEm15LndpdHRlbXVzZXVtLm9yZ4IUc2VjdXJlLndhbGtl
cmFydC5vcmeCGXRpY2tldHMuYXVzdGludGhlYXRyZS5vcmeCEm15LnR1bHNhYmFs
bGV0Lm9yZ4IdbXkuZ3JhbnRwYXJrbXVzaWNmZXN0aXZhbC5jb22CF3RpY2tldHMu
cGVyb3RtdXNldW0ub3JnghZ0aWNrZXRzLmxpZWRjZW50ZXIub3JnghRteS50dWxz
YXN5bXBob255Lm9yZ4IbbXkuaGFycmlzdGhlYXRlcmNoaWNhZ28ub3JngiB0aWNr
ZXRzLmhvdXN0b25maXJzdHRoZWF0ZXJzLmNvbYIWdGlja2V0aW5nLmtjYmFsbGV0
Lm9yZ4IXbXkuY2hpbGRyZW5zdGhlYXRyZS5vcmeCEm9yZGVycy5jb2Nhc3RsLm9y
Z4IVYWNjZXNzLmZ3c3ltcGhvbnkub3JnghN0aWNrZXRpbmcua2NyZXAub3Jnghp0
aWNrZXRzLmthdWZmbWFuY2VudGVyLm9yZ4IbdGlja2V0aW5nLndpbHNvbi1jZW50
ZXIuY29tghlleHBlcmllbmNlLm1jYWNoaWNhZ28ub3Jnghx0aWNrZXRzLndhbHRv
bmFydHNjZW50ZXIub3JnghNjYXJ0Lnpvb3NvY2lldHkub3Jngg90aWNrZXRzLmRj
dC5vcmeCEG15LmRhbGxhc3pvby5jb22CHXNlY3VyZXNpdGUuZ3V0aHJpZXRoZWF0
ZXIub3JnghhjYXJ0LmhvdXN0b25zeW1waG9ueS5vcmeCFmNhcnQubmVsc29uLWF0
a2lucy5vcmeCFm15LnRoZWNhcnNvbmNlbnRlci5vcmeCF3RpY2tldGluZy5ncmFj
ZWxhbmQuY29tghR0aWNrZXRzLm92ZXJ0dXJlLm9yZ4ISYnV5LmFtcHRpY2tldHMu
Y29tghd0aWNrZXRpbmcub3BlcmEtc3RsLm9yZ4ITdGlja2V0cy50b3VoaWxsLm9y
Z4ITdGlja2V0cy5rY29wZXJhLm9yZ4IedGlja2V0cy50ZXhhc2JhbGxldHRoZWF0
ZXIub3JnghZ0aWNrZXRzLmtjc3ltcGhvbnkub3Jnghd0aWNrZXRzLnphY2h0aGVh
dHJlLm9yZ4ILYnV5LnJ3Yi5vcmeCF3RpY2tldHMua2NzdGFybGlnaHQuY29tghBN
eS5UaGVTS3lQQUMuY29tghRteS5zdGFnZXN0aGVhdHJlLm9yZ4IVbXkud3JpdGVy
c3RoZWF0cmUub3JnghBteS5waGlsYnJvb2sub3Jngg5teS5tbm9wZXJhLm9yZ4IL
bXkudHV0cy5jb22CEGJ1eS5md211c2V1bS5vcmeCHmNhcnQuYnJvYWR3YXl0aGVh
dHJlY2VudGVyLmNvbYISbXkudGhld29ybGR3YXIub3JnghBteS5haGhhdHVsc2Eu
b3JnghNteS50aGVoZXJtaXRhZ2UuY29tghluYXJhbXB0ZXN0Lnpvb3NvY2lldHku
b3JnghpuYXJhbXB0ZXN0LnBlcm90bXVzZXVtLm9yZ4ILbXkuaG5vYy5vcmeCIWJp
bGxldHRlcmllLmRyb2l0c2RlbGFwZXJzb25uZS5jYYIYdGlja2V0aW5nLmh1bWFu
cmlnaHRzLmNhghhuYXJhbXB0ZXN0LmRhbGxhc3pvby5jb22CEG15Lm94Zm9yZHBh
Yy5vcmeCFW15LnRoZWhvYmJ5Y2VudGVyLm9yZ4IZbXkuZGVzbW9pbmVzYXJ0Y2Vu
dGVyLm9yZ4IUc2hvcC5zdGxzeW1waG9ueS5vcmeCGm15LmRhbGxhc3RoZWF0ZXJj
ZW50ZXIub3JnghBtZW1iZXJzLmtlcmEub3JnghVteS50aGlua2VyeWF1c3Rpbi5v
cmeCGXRpY2tldHMud3JpZ2h0d29vZDY1OS5vcmeCFXNlY3VyZS5raW1iZWxsYXJ0
Lm9yZ4IZbXkud29vZHlndXRocmllY2VudGVyLm9yZ4IQdGl4LnRoZWF0cmUyLm9y
Z4IQbXkuZ2lsY3JlYXNlLm9yZ4IJbXkud3NvLmNhghRjYXJ0LnRpY2tldG9tYWhh
LmNvbYIObXkuamF6enN0bC5vcmeCDW9yZGVyLmNzby5vcmeCGHRpY2tldHMubWls
d2F1a2VlcmVwLm9yZ4IndGlja2V0cy5jcnlzdGFsYnJpZGdlcy10aGVtb21lbnRh
cnkub3JnggtteS5tZmFoLm9yZ4IYdGlja2V0cy5taWx3YXVrZWVyZXAuY29tghB0
bmV3ZGV2Lm1mYWgub3JnghN0aWNrZXRzLnJveWFsbXRjLmNhghRteS50aGVsb25n
Y2VudGVyLm9yZ4IUdGlja2V0cy5oanNlcmllcy5vcmeCDnNlY3VyZS5oYmcub3Jn
ghZzZWN1cmUuZGFsbGFzb3BlcmEub3JnghlzZWN1cmUuZGFsbGFzc3ltcGhvbnku
b3JnghVzZWN1cmUuZmlyc3RzdGFnZS5vcmeCCm15LnNtbS5vcmeCG215Lm9rbGFo
b21hY29udGVtcG9yYXJ5Lm9yZ4IZbXkuYXJrYW5zYXNhcnRzY2VudGVyLm9yZ4IT
dGlja2V0LmFydHNpb3dhLmNvbYILbXkubm9tYS5vcmcwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaAr
hilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc3LmNybDAvoC2g
K4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNy5jcmwwTAYD
VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsG
AQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0
dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2
ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2
APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABdUMFOrcAAAQDAEcw
RQIgZYEqiwf1HenjdlADxD+Irofa2TjsC4lkwh66UC6xwAwCIQD+0mJoAyf9xSrE
zL64Om+qVIBUClhJlYmGDEw7Tu5xWQB1AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yh
c5SyXub2xw7KAAABdUMFOwAAAAQDAEYwRAIgWBOyiFqokFwLltIeUPK04REazznv
kSr+6Ob3xjpvjAQCIBBYtFLwGDcbqdDYUGbClqu5EJm0+zoq3djKtxkKoLX/MA0G
CSqGSIb3DQEBCwUAA4IBAQAjPHJSH+wzQVP+WxWEF7GJ5njmDT3DZBAujn87IACr
XLVyVUQ1tXxKHdpvgYEUUifTACpyWhnw8MBaksqNDQvgTy2O/wjHc8uauoO4cvtX
icK+vs5qlJ2jeuKKA/DJZGJA2uUewyHNkZkZxhDiUzcULz71A3YrL1iJyXNlPfPk
XoXH5uI7rcok7NEkYt19xDP40ldunFu5hPr6y2sg2SRjtLin4vIG1pftf5VOJrYQ
JBS7WG9NUoBIKEGSw7PKchGxeqIBg3ypArEzoytA17v8owBLgSvtmO8h2kMnoIE7
PPCt9FiD56GJPL96uNtxQn6evH/0HrggdoCT+s/9Kq5j
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui3OuN62WguQDf3F3c3e
A81ZfaTzTWkLL/iNkJqWqqK2gZpRMxVOaKrcHKbiuwg4yXaVb5XY3EOyVDV2vZUO
AmlrKL1Wacooq8ghlMIg1fhjx2VJ54t0CssuCyKJ5NTssoibeCKH70sGcSTVZaVb
AJY5RT7xH2cZ0Zfq8eyuBZjixhSXnbClDW5a49SzXvnGIa024uEDYN9rrePollA9
AqoGqy96x/exT2ZgP2yHtraRtEdcdHGKl70CSitkrHIIKOlWkGgpG0A7qq+/Vr0h
6pwxOCOpw34dfxkhcT3HGgCM7lPqtbC7ZX7361m97UwxKKSN76o8RdcBHtE7HT1v
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15608594932631321406542297238787131298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23502913247960766616221972986897380070527629556004014448515505331419644102197938086925810054765302138039858967562194966373120472162954241964997905591358081251697446309423599044104932761702843651213412512195717565300656215949478583530448833606572728522283664721817585245091236826593553068012522536157994381126854391801868139973129218720594023644585029426239012553497011482350655396627364686097437132805549796119685370609009194088105023671688477156790308503367735517341875341648063048095989044162837004352752564278011692697151804809478663339456798934659804568455454388265578933760940407457056416755701719017312023834469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c86e53d298d3257ac2dc4165c929ee2036ffae5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hubbardstreetdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.slso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nashvillesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.eldomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.grandtheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.alysstephens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.asf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.mnhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsabotanic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.joffrey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.countrymusichalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegilmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dacamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mercuryhouston.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.balletaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wittemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.walkerart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.austintheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsaballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.grantparkmusicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.perotmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.liedcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.harristheaterchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.houstonfirsttheaters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.childrenstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.cocastl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fwsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kauffmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.wilson-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mcachicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.waltonartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.zoosociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallaszoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.houstonsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.nelson-atkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thecarsoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.graceland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.overture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.amptickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.opera-stl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.touhill.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.texasballettheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.zachtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.rwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'My.TheSKyPAC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stagestheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.writerstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.philbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.fwmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.broadwaytheatrecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theworldwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ahhatulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehermitage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.zoosociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.perotmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hnoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billetterie.droitsdelapersonne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.humanrights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.dallaszoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oxfordpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehobbycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesartcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.stlsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallastheatercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thinkeryaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wrightwood659.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kimbellart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.woodyguthriecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.theatre2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gilcrease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jazzstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.milwaukeerep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.crystalbridges-themomentary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mfah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.milwaukeerep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnewdev.mfah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.royalmtc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thelongcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hjseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hbg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallassymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.firststage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oklahomacontemporary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.arkansasartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.artsiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.noma.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017543053ab70000040300473045022065812a8b07f51de9e3765003c43f88ae87dad938ec0b8964c21eba502eb1c00c022100fed262680327fdc52ac4ccbeb83a6faa5480540a58499589860c4c3b4eee71590075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017543053b00000004030046304402205813b2885aa8905c0b96d21e50f2b4e1111acf39ef912afee8e6f7c63a6f8c0402201058b452f018371ba9d0d85066c296abb91099b4fb3a2addd8cab7190aa0b5ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00233c72521fec334153fe5b158417b189e678e60d3dc364102e8e7f3b2000ab5cb572554435b57c4a1dda6f8181145227d3002a725a19f0f0c05a92ca8d0d0be04f2d8eff08c773cb9aba83b872fb5789c2bebece6a949da37ae28a03f0c9646240dae51ec321cd919919c610e25337142f3ef503762b2f5889c973653df3e45e85c7e6e23badca24ecd12462dd7dc433f8d2576e9c5bb984fafacb6b20d92463b4b8a7e2f206d697ed7f954e26b6102414bb586f4d528048284192c3b3ca7211b17aa201837ca902b133a32b40d7bbfca3004b812bed98ef21da4327a0813b3cf0adf45883e7a1893cbf7ab8db71427e9ebc7ff41eb820768093facffd2aae63