san-5-s13.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:3e:d8:55:1c:df:1c:ed:a0:c6:3a:29:a7:af:7e:84 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:3e:d8:55:1c:df:1c:ed:a0:c6:3a:29:a7:af:7e:84
Serial Number (int): 13618590106881827857783830524250259076
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f4:0a:6b:32:db:1e:25:4e:6b:ce:bb:d7:cf:5a:7e:b8:f2:4e:ce:4e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 1a:51:47:19:a9:c8:c6:fc:0f:a0:79:5f:f1:98:85:38:06:91:f8:30
Fingerprint (sha256): 41:37:c6:32:47:9d:fe:1a:fd:c9:59:b1:0c:7f:8d:16:54:54:9f:40:57:72:ae:ca:9d:20:0b:2e:bf:e3:24:99

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-5-s13.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-5-s13.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-5-s13.tlsprovisioning.exacttarget.com
image.mail.orthocarolina.com
image.e.cleanmade.com.au
image.hello.themilkfairy.com
image.e.platinum8.media
image.mkt.vivasorteoficial.com.br
image.email.quartzbenefits.com
image.email.bankofsaintlucia.com
image.ma.tsuruha-hd.co.jp
image.consumer.smartpay.support
image.info.redwoodcu.org
image.go.magmutual.com
image.news.inteligenciafinanceira.com.br
image.academy.cta.nj.gov
image.email.heartland.my-coke.com
image.email.liberty.my-coke.com
image.email.reyes.my-coke.com
image.email.swirecc.my-coke.com
image.campanhas.theifriend.com
image.information.camchealth.org
image.news.cpetecnologia.com
image.welcomemail.insurancespecialists.com
image.mail.fourseasonsyachts.com
image.upspartnerhub.ups.com
image.info.genscript.com
image.info.sanaretoday.com
image.mail.2020-4.com
image.ecomm.du.edu
image.licenseupdates.wi.gov
image.mail.theiacp.org
image.e.fidelityrealestate.com
image.onlineshop.aeonbody.com
image.contact.harbourfrontwealth.com
image.e.luvbridal.com
image.em.stellantis-fs.com
image.email.masterbrand.com
image.franchising.fatbrands.com
image.info.oakmount.in
image.jp.royalcanin.com
image.mc.incae.edu
image.email.directv-mail.com
image.mail.dengo.com
image.mail.privateriskpartners.com
image.na.sobi.com
image.negocioseficientes.com
image.crm.kingoflenses.com.br
image.marketing.rebounderz.com
image.e.panasonic.co.nz
image.mc.aeraforhome.com
image.e.biltmore.com
image.marketing.nutribullet.com
image.ma.tomods.jp
image.marketing.masterbrand.com
image.mailstg.lifenet-seimei.co.jp
image.klay.ind.in
image.mail.lg.com.br
image.msg.value-books.jp
image.email.bewellkentucky.com
image.email.pacificbattleship.com
image.growthvidhyapeeth.co.in
image.mkt.pizzahut.com.br
image.ar.livefully.com
image.br.livefully.com
image.hola.motoapexcr.com
image.email.crnova.com
image.email.novashore.io
image.info-copastur.com.br
image.marketing.jemsecurity.com
image.email.e-wahalla.com
image.amplifiquesunegocio.com
image.efficientcloud.tech
image.email.e-starbucks.com.br
image.smartbusinesses.tech
image.comms.maf.ca
image.marketing.cscorp.tec.br
image.email.larkhotels.com
image.mailingsf.flechabus.com.ar
image.hub.myorthodonticsinfo.com
image.telcel.com.mx
image.e.bbet.com.au
image.email.mavtv.com
image.host.allegiancegold.com
image.mail.harvardonline.harvard.edu
image.mkt.gia.finance
image.mkt.multilog.com.br
image.compliance.itau.com.br
image.drive.407etr.com
image.kmia.triforta.com
image.marketing.panamapacifico.com
image.tiendasgarces.mx
image.email.e-subway.com
image.email.larkindependent.com
image.marketing.triforta.com
image.updates.timespro.com
image.epingenieriauc.cl
image.mbdp.ferring.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-5-s13.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZVD/pyhyPX1yGkb8iFJ
khH89sDNtbMrTdt9QYYnDvDpeWtd3P4r76z8kV4R56tf4ZNvcXQrUoath4H0dt6c
FiApRlcQVFLPFrjv7//PZcLznLmbgXYz87awHZnPAEvxhI9AAhPntsXpEzCbMHfx
BZA9G8HyxQUgYgbYu3WHT4kHn5pwH/yLW74vdOK2GDzRzXoUEyz7a300DLj32Ug6
HhlfDFLNtjnBbGK98oYZDj2yQb4uapwmwFPZOpd20Jr4OqM2oW9ezZuI2MDPizC8
4Djdi42PgVpAKaUKLMiF/rTBcTIYeffPbbbPfyfbrEBHehqUIIq5PsjnH5Ka+up/
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13618590106881827857783830524250259076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-5-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23932645251146688799737922309328890008739214386563113802329538236064911920625283160197972678154999325782150735060573715445406498125280488787082128908804418445376128622882273980888323868619239509056348326124927293596411614375360089638089362176288004224214208353929459550227121219256846320519035632176795763010504315189066980405260496284079802052726349475451572731818269988125579532064937347653960650451817612548006388331778993957304161513612912258432839153007899066591409616678444353959772816666165251637126498282219336521089384284957267206320336402569964560668813122471920107475988317178760081253030182689892056334279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f40a6b32db1e254e6bcebbd7cf5a7eb8f24ece4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2759 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-5-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.orthocarolina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.cleanmade.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.themilkfairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.platinum8.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.vivasorteoficial.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.quartzbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bankofsaintlucia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.tsuruha-hd.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.consumer.smartpay.support'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.redwoodcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.magmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.inteligenciafinanceira.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.academy.cta.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.heartland.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.liberty.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.reyes.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.swirecc.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campanhas.theifriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.information.camchealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cpetecnologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.welcomemail.insurancespecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fourseasonsyachts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.upspartnerhub.ups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.genscript.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.sanaretoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.2020-4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ecomm.du.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.licenseupdates.wi.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.theiacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fidelityrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.onlineshop.aeonbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.harbourfrontwealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.luvbridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.stellantis-fs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.masterbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.franchising.fatbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.oakmount.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jp.royalcanin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.incae.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.directv-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dengo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.privateriskpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.na.sobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.negocioseficientes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.kingoflenses.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.rebounderz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.panasonic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.aeraforhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.biltmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.nutribullet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.tomods.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.masterbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailstg.lifenet-seimei.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.klay.ind.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lg.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msg.value-books.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bewellkentucky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pacificbattleship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.growthvidhyapeeth.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.pizzahut.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ar.livefully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.br.livefully.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hola.motoapexcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.crnova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.novashore.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-copastur.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.jemsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.e-wahalla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.amplifiquesunegocio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.efficientcloud.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.e-starbucks.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smartbusinesses.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.maf.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.cscorp.tec.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.larkhotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailingsf.flechabus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hub.myorthodonticsinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.telcel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bbet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mavtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.host.allegiancegold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.harvardonline.harvard.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.gia.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.multilog.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.compliance.itau.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.drive.407etr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.kmia.triforta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.panamapacifico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tiendasgarces.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.e-subway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.larkindependent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.triforta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.timespro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.epingenieriauc.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mbdp.ferring.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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