secure-uswe2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:61:e2:07:35:4d:0f:10:eb:ec:e9:0b:76:e6:11:54 was issued on by DigiCert Inc.

With 111 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:61:e2:07:35:4d:0f:10:eb:ec:e9:0b:76:e6:11:54
Serial Number (int): 17788201136145211461370107402939404628
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e9:0e:20:5c:a2:1a:2f:9e:ce:79:55:bc:e2:6b:05:35:4c:87:c9:22
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 48:99:ea:5d:f2:bf:18:8d:47:e3:be:4b:f7:83:5a:11:b4:5f:e6:8d
Fingerprint (sha256): 40:fb:19:fe:56:ca:2f:80:13:df:fe:a2:c9:66:6b:05:5d:59:d3:dc:ca:3a:8f:00:53:88:55:f7:92:c2:6d:a8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure-uswe2-1.tessituranetwork.com

111

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-uswe2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tn.services
*.tnhs.cloud
tickets.azopera.org
tickets.coloradoballet.org
ticketing.bravovail.org
tickets.cupresents.org
support.arvadacenter.org
shop.youraga.ca
tickets.theaterworks.org
my.scottsdalemuseumwest.org
tickets.scottsdalearts.org
tickets.phoenixsymphony.org
tickets.phoenixtheatre.com
tickets.azscience.org
secure-uswe2-1.tessituranetwork.com
tickets.coloradosymphony.org
checkout.colburnschool.edu
secure.seattleartmuseum.org
tickets.theshedd.org
secure.act-sf.org
secure.foxtheaterspokane.org
secure.vancouversymphony.ca
tickets.calacademy.org
cart.sunsetcenter.org
order.acttheatre.org
secure.thesymphony.org
tickets.cerritoscenter.com
tickets.balletaz.org
tickets.edmontonopera.com
shop.artscommons.ca
boxoffice.balletwest.org
tickets.hultcenter.org
official.santafeopera.org
my.moonlightstage.com
my.lawrencehallofscience.org
secure.sfperformances.org
tickets.lensic.org
tickets.haletheater.org
cart.tixonthesquare.ca
naramptest.thanksgivingpoint.org
tickets.uccspresents.org
shop.calgaryopera.com
tickets.intermountainarts.org
my.winspearcentre.com
tickets.boisephil.org
my.usuo.org
cart.thanksgivingpoint.org
my.theatrecalgary.com
arttix.artsaltlake.org
boxoffice.santafesymphony.org
secure.santafechambermusic.com
secure.performancesantafe.org
my.operacolorado.org
subscription.magicspace.net
my.broadwaysacramento.com
natest.seattleopera.org
naramptest.californiasciencecenter.org
purchase.groundlings.com
tickets.philharmonicsociety.org
securesite.pcs.org
my.pasadenaplayhouse.org
order.pnb.org
tickets.orsymphony.org
my.lfjcc.org
checkout.lobero.com
securesite.lajollaplayhouse.org
wowfestival.lajollaplayhouse.org
purchase.lagunaplayhouse.com
tickets.haughpac.com
ticketing.granadasb.org
purchasing.sandiegosymphony.org
tickets.galloarts.org
store.ensembletheatre.com
my.artcenter.org
my.californiasciencecenter.org
secure.calperformances.org
purchase.broadwayrose.org
tickets.berkeleyrep.org
tickets.artistsrep.org
mst1.tessituranetwork.com
pst1.tessituranetwork.com
t-secure-uswe2-1.tessituranetwork.com
securesite.sdrep.org
secure.seattleopera.org
my.montalvoarts.org
tickets.hawaiiopera.org
transaction.theconrad.org
tickets.thesmithcenter.com
cart.lamiradatheatre.com
tickets.vancouveropera.ca
cart.pacificchorale.org
my.afi.com
tickets.lamasterchorale.org
ticketing.thetech.org
store.mopop.org
my.californiahistoricalsociety.org
secure.honolulumuseum.org
cart.seattlesymphony.org
secure-tickets.berkeley.edu
tickets.ybca.org
purchase.worldofspeed.org
tickets.lutherburbankcenter.org
tickets.thewallis.org
tickets.mondaviarts.org
my.theatreworks.org
sto.stanfordtickets.org
www.stanfordlivetickets.org
www.stanfordjazztickets.org
my.5thavenue.org
tickets.artsandlectures.ucsb.edu
naramptest.artsandlectures.ucsb.edu

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-uswe2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQXzCCD0egAwIBAgIQDWHiBzVNDxDr7OkLduYRVDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwNTAxMDAwMDAwWhcN
MjAwOTMwMTIwMDAwWjB+MQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxDzAN
BgNVBAcTBkRhbGxhczEgMB4GA1UEChMXVGVzc2l0dXJhIE5ldHdvcmssIEluYy4x
LDAqBgNVBAMTI3NlY3VyZS11c3dlMi0xLnRlc3NpdHVyYW5ldHdvcmsuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljmSz9QRkpjavZoArM6Lfyk
hv52r9fwCMlOJeW3mAiUcLCBVD/fMsCGzQS36o7NtDVAsz6yY42MVLmdGXIhY6y4
+HtCY7AFnX8ZeH5kC0qgF/8hhKL9LivgukU9ZnX+IE0ZIih6wy4vE9miux2r+8Aq
tEL8V7mSF5/wOYGSWVnNwAks2Trgs9y67sVaAzkORL6nLmYLjXPZ+1B103g/067C
KriT1VZkVkVSCNnifWcINUqrLo5XQzmOW/gh4Vw+LBXBe4IOAD068hcnpRiUFwYr
X03Ag1s/CGYt0J64rUKzxBmaXB4MwS1is2uFX38BWQCzsP801JpTKIuR7xt8eQID
AQABo4INCDCCDQQwHwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYD
VR0OBBYEFOkOIFyiGi+eznlVvOJrBTVMh8kiMIILNQYDVR0RBIILLDCCCyiCDSou
dG4uc2VydmljZXOCDCoudG5ocy5jbG91ZIITdGlja2V0cy5hem9wZXJhLm9yZ4Ia
dGlja2V0cy5jb2xvcmFkb2JhbGxldC5vcmeCF3RpY2tldGluZy5icmF2b3ZhaWwu
b3JnghZ0aWNrZXRzLmN1cHJlc2VudHMub3JnghhzdXBwb3J0LmFydmFkYWNlbnRl
ci5vcmeCD3Nob3AueW91cmFnYS5jYYIYdGlja2V0cy50aGVhdGVyd29ya3Mub3Jn
ghtteS5zY290dHNkYWxlbXVzZXVtd2VzdC5vcmeCGnRpY2tldHMuc2NvdHRzZGFs
ZWFydHMub3Jnght0aWNrZXRzLnBob2VuaXhzeW1waG9ueS5vcmeCGnRpY2tldHMu
cGhvZW5peHRoZWF0cmUuY29tghV0aWNrZXRzLmF6c2NpZW5jZS5vcmeCI3NlY3Vy
ZS11c3dlMi0xLnRlc3NpdHVyYW5ldHdvcmsuY29tghx0aWNrZXRzLmNvbG9yYWRv
c3ltcGhvbnkub3JnghpjaGVja291dC5jb2xidXJuc2Nob29sLmVkdYIbc2VjdXJl
LnNlYXR0bGVhcnRtdXNldW0ub3JnghR0aWNrZXRzLnRoZXNoZWRkLm9yZ4IRc2Vj
dXJlLmFjdC1zZi5vcmeCHHNlY3VyZS5mb3h0aGVhdGVyc3Bva2FuZS5vcmeCG3Nl
Y3VyZS52YW5jb3V2ZXJzeW1waG9ueS5jYYIWdGlja2V0cy5jYWxhY2FkZW15Lm9y
Z4IVY2FydC5zdW5zZXRjZW50ZXIub3JnghRvcmRlci5hY3R0aGVhdHJlLm9yZ4IW
c2VjdXJlLnRoZXN5bXBob255Lm9yZ4IadGlja2V0cy5jZXJyaXRvc2NlbnRlci5j
b22CFHRpY2tldHMuYmFsbGV0YXoub3Jnghl0aWNrZXRzLmVkbW9udG9ub3BlcmEu
Y29tghNzaG9wLmFydHNjb21tb25zLmNhghhib3hvZmZpY2UuYmFsbGV0d2VzdC5v
cmeCFnRpY2tldHMuaHVsdGNlbnRlci5vcmeCGW9mZmljaWFsLnNhbnRhZmVvcGVy
YS5vcmeCFW15Lm1vb25saWdodHN0YWdlLmNvbYIcbXkubGF3cmVuY2VoYWxsb2Zz
Y2llbmNlLm9yZ4IZc2VjdXJlLnNmcGVyZm9ybWFuY2VzLm9yZ4ISdGlja2V0cy5s
ZW5zaWMub3Jnghd0aWNrZXRzLmhhbGV0aGVhdGVyLm9yZ4IWY2FydC50aXhvbnRo
ZXNxdWFyZS5jYYIgbmFyYW1wdGVzdC50aGFua3NnaXZpbmdwb2ludC5vcmeCGHRp
Y2tldHMudWNjc3ByZXNlbnRzLm9yZ4IVc2hvcC5jYWxnYXJ5b3BlcmEuY29tgh10
aWNrZXRzLmludGVybW91bnRhaW5hcnRzLm9yZ4IVbXkud2luc3BlYXJjZW50cmUu
Y29tghV0aWNrZXRzLmJvaXNlcGhpbC5vcmeCC215LnVzdW8ub3JnghpjYXJ0LnRo
YW5rc2dpdmluZ3BvaW50Lm9yZ4IVbXkudGhlYXRyZWNhbGdhcnkuY29tghZhcnR0
aXguYXJ0c2FsdGxha2Uub3Jngh1ib3hvZmZpY2Uuc2FudGFmZXN5bXBob255Lm9y
Z4Iec2VjdXJlLnNhbnRhZmVjaGFtYmVybXVzaWMuY29tgh1zZWN1cmUucGVyZm9y
bWFuY2VzYW50YWZlLm9yZ4IUbXkub3BlcmFjb2xvcmFkby5vcmeCG3N1YnNjcmlw
dGlvbi5tYWdpY3NwYWNlLm5ldIIZbXkuYnJvYWR3YXlzYWNyYW1lbnRvLmNvbYIX
bmF0ZXN0LnNlYXR0bGVvcGVyYS5vcmeCJm5hcmFtcHRlc3QuY2FsaWZvcm5pYXNj
aWVuY2VjZW50ZXIub3JnghhwdXJjaGFzZS5ncm91bmRsaW5ncy5jb22CH3RpY2tl
dHMucGhpbGhhcm1vbmljc29jaWV0eS5vcmeCEnNlY3VyZXNpdGUucGNzLm9yZ4IY
bXkucGFzYWRlbmFwbGF5aG91c2Uub3Jngg1vcmRlci5wbmIub3JnghZ0aWNrZXRz
Lm9yc3ltcGhvbnkub3JnggxteS5sZmpjYy5vcmeCE2NoZWNrb3V0LmxvYmVyby5j
b22CH3NlY3VyZXNpdGUubGFqb2xsYXBsYXlob3VzZS5vcmeCIHdvd2Zlc3RpdmFs
Lmxham9sbGFwbGF5aG91c2Uub3JnghxwdXJjaGFzZS5sYWd1bmFwbGF5aG91c2Uu
Y29tghR0aWNrZXRzLmhhdWdocGFjLmNvbYIXdGlja2V0aW5nLmdyYW5hZGFzYi5v
cmeCH3B1cmNoYXNpbmcuc2FuZGllZ29zeW1waG9ueS5vcmeCFXRpY2tldHMuZ2Fs
bG9hcnRzLm9yZ4IZc3RvcmUuZW5zZW1ibGV0aGVhdHJlLmNvbYIQbXkuYXJ0Y2Vu
dGVyLm9yZ4IebXkuY2FsaWZvcm5pYXNjaWVuY2VjZW50ZXIub3JnghpzZWN1cmUu
Y2FscGVyZm9ybWFuY2VzLm9yZ4IZcHVyY2hhc2UuYnJvYWR3YXlyb3NlLm9yZ4IX
dGlja2V0cy5iZXJrZWxleXJlcC5vcmeCFnRpY2tldHMuYXJ0aXN0c3JlcC5vcmeC
GW1zdDEudGVzc2l0dXJhbmV0d29yay5jb22CGXBzdDEudGVzc2l0dXJhbmV0d29y
ay5jb22CJXQtc2VjdXJlLXVzd2UyLTEudGVzc2l0dXJhbmV0d29yay5jb22CFHNl
Y3VyZXNpdGUuc2RyZXAub3JnghdzZWN1cmUuc2VhdHRsZW9wZXJhLm9yZ4ITbXku
bW9udGFsdm9hcnRzLm9yZ4IXdGlja2V0cy5oYXdhaWlvcGVyYS5vcmeCGXRyYW5z
YWN0aW9uLnRoZWNvbnJhZC5vcmeCGnRpY2tldHMudGhlc21pdGhjZW50ZXIuY29t
ghhjYXJ0LmxhbWlyYWRhdGhlYXRyZS5jb22CGXRpY2tldHMudmFuY291dmVyb3Bl
cmEuY2GCF2NhcnQucGFjaWZpY2Nob3JhbGUub3JnggpteS5hZmkuY29tght0aWNr
ZXRzLmxhbWFzdGVyY2hvcmFsZS5vcmeCFXRpY2tldGluZy50aGV0ZWNoLm9yZ4IP
c3RvcmUubW9wb3Aub3JngiJteS5jYWxpZm9ybmlhaGlzdG9yaWNhbHNvY2lldHku
b3JnghlzZWN1cmUuaG9ub2x1bHVtdXNldW0ub3JnghhjYXJ0LnNlYXR0bGVzeW1w
aG9ueS5vcmeCG3NlY3VyZS10aWNrZXRzLmJlcmtlbGV5LmVkdYIQdGlja2V0cy55
YmNhLm9yZ4IZcHVyY2hhc2Uud29ybGRvZnNwZWVkLm9yZ4IfdGlja2V0cy5sdXRo
ZXJidXJiYW5rY2VudGVyLm9yZ4IVdGlja2V0cy50aGV3YWxsaXMub3Jnghd0aWNr
ZXRzLm1vbmRhdmlhcnRzLm9yZ4ITbXkudGhlYXRyZXdvcmtzLm9yZ4IXc3RvLnN0
YW5mb3JkdGlja2V0cy5vcmeCG3d3dy5zdGFuZm9yZGxpdmV0aWNrZXRzLm9yZ4Ib
d3d3LnN0YW5mb3JkamF6enRpY2tldHMub3JnghBteS41dGhhdmVudWUub3JngiB0
aWNrZXRzLmFydHNhbmRsZWN0dXJlcy51Y3NiLmVkdYIjbmFyYW1wdGVzdC5hcnRz
YW5kbGVjdHVyZXMudWNzYi5lZHUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3Js
My5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2Ny
bDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3Bglg
hkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYD
VR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjA2GTpm7/XFTMIoTp14+Dpj/oBQuvy7IRLt2Yqxwv+g7jJ2NAN80jg2sZdeS
k7H8LodtHrPbIBwhBRZpUvzg1EPi6k0fLjFY2iL9cnwv7z3co86IDuSgPBQ8kurI
FNQHH1aReo7DCGVnDNx90Dhm101wfFSNiWhps3wPmWB8ZLudeY7V9pPtT+fIk4W5
JY0scGeG2IhbfBN7NG1T7+ZBw5aOSBzhNgg/FyKWGdIy7v+kozKq/zO8xeBGVG54
qYJFv2Zr07eDGPwlyYx1pX/VWR90Il4w4PddJdxzYbkZJB8kJ5jBHUz/R1Dopk32
r+sCJwcO9IZFcLBVeezASLrOOQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljmSz9QRkpjavZoArM6
Lfykhv52r9fwCMlOJeW3mAiUcLCBVD/fMsCGzQS36o7NtDVAsz6yY42MVLmdGXIh
Y6y4+HtCY7AFnX8ZeH5kC0qgF/8hhKL9LivgukU9ZnX+IE0ZIih6wy4vE9miux2r
+8AqtEL8V7mSF5/wOYGSWVnNwAks2Trgs9y67sVaAzkORL6nLmYLjXPZ+1B103g/
067CKriT1VZkVkVSCNnifWcINUqrLo5XQzmOW/gh4Vw+LBXBe4IOAD068hcnpRiU
FwYrX03Ag1s/CGYt0J64rUKzxBmaXB4MwS1is2uFX38BWQCzsP801JpTKIuR7xt8
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17788201136145211461370107402939404628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22514256303524067977795469780233512705505488429210718140007921531499719033898076386763174880967736964994991770702998079604921322941811058709981133097611589380858134603897247516518732131052868532046752599741014276817259181306868780554313944977794378863756213167406909268832354726197240172798863676488207305055648260858722181623230270243059130249101813770087755484779148993033199369029864283164027754165085292167566876432416104281910959205488850517220181487114742299616947364860615228514633523712083355188596029774075864727114176255551518599977199483060406513669768407916732983135631661328690345362878548267426238921849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e90e205ca21a2f9ece7955bce26b05354c87c922
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradoballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.bravovail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cupresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.arvadacenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.youraga.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theaterworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scottsdalemuseumwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.scottsdalearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.colburnschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theshedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.act-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foxtheaterspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouversymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.calacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sunsetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.acttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cerritoscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.edmontonopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.artscommons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hultcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'official.santafeopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.moonlightstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lawrencehallofscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sfperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lensic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haletheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tixonthesquare.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.uccspresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calgaryopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.intermountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.winspearcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.boisephil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usuo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatrecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arttix.artsaltlake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.santafesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.santafechambermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performancesantafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.magicspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.broadwaysacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natest.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.groundlings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.philharmonicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.pcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pasadenaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.orsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lfjcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lobero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfestival.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.lagunaplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haughpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.granadasb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.sandiegosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.galloarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ensembletheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.broadwayrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.berkeleyrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artistsrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.sdrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.montalvoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hawaiiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction.theconrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesmithcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lamiradatheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.vancouveropera.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.pacificchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lamasterchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.thetech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mopop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiahistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.honolulumuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.seattlesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-tickets.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ybca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.worldofspeed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lutherburbankcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewallis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mondaviarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto.stanfordtickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordlivetickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordjazztickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.5thavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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