securessl-pst1.tessituranetworkhost.com

- Tessitura Network, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:b7:da:f7:30:fe:52:fc:97:56:94:4f:4c:65:b8:18 was issued on by DigiCert Inc.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b7:da:f7:30:fe:52:fc:97:56:94:4f:4c:65:b8:18
Serial Number (int): 2283859470709265939511541605572392984
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 6a:84:c7:15:cb:2f:37:af:95:d2:87:1d:48:88:79:6c:a7:2c:15:b5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 2a:82:42:0d:51:01:f5:73:2b:fc:92:40:d8:af:45:bf:b8:c5:5c:fd
Fingerprint (sha256): 47:26:b3:80:c5:40:a9:48:a0:78:0f:9e:1c:49:f6:ab:18:8a:4f:1a:05:49:e4:71:d9:3f:ec:64:19:c9:8b:d2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate securessl-pst1.tessituranetworkhost.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securessl-pst1.tessituranetworkhost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securessl-pst1.tessituranetworkhost.com
tickets.artistsrep.org
tickets.berkeleyrep.org
purchase.broadwayrose.org
secure.calperformances.org
my.californiasciencecenter.org
my.artcenter.org
store.ensembletheatre.com
tickets.galloarts.org
ticketing.granadasb.org
purchase.groundlings.com
tickets.haughpac.com
purchase.lagunaplayhouse.com
wowfestival.lajollaplayhouse.org
securesite.lajollaplayhouse.org
checkout.lobero.com
my.lfjcc.org
tickets.orsymphony.org
order.pnb.org
my.pasadenaplayhouse.org
securesite.pcs.org
tickets.philharmonicsociety.org
securesite.sdrep.org
purchasing.sandiegosymphony.org
secure.seattleopera.org
cart.seattlesymphony.org
www.stanfordjazztickets.org
www.stanfordlivetickets.org
sto.stanfordtickets.org
my.theatreworks.org
tickets.mondaviarts.org
tickets.artsandlectures.ucsb.edu
tickets.thewallis.org
tickets.lutherburbankcenter.org
purchase.worldofspeed.org
tickets.ybca.org
secure-tickets.berkeley.edu
secure.honolulumuseum.org
tickets.hawaiiopera.org
my.californiahistoricalsociety.org
store.mopop.org
ticketing.thetech.org
tickets.lamasterchorale.org
my.afi.com
cart.pacificchorale.org
tickets.vancouveropera.ca
cart.lamiradatheatre.com
tickets.thesmithcenter.com
my.californiamusicaltheatre.com
transaction.theconrad.org
my.montalvoarts.org
natest.seattleopera.org
naramptest.californiasciencecenter.org
my.broadwaysacramento.com
tickets.cerritoscenter.com
secure.thesymphony.org
order.acttheatre.org
naramptest.artsandlectures.ucsb.edu
cart.sunsetcenter.org
tickets.calacademy.org
secure.vancouversymphony.ca
secure.foxtheaterspokane.org

Other certificates including the domain name tessituranetworkhost.com

(limited to 100 certificates)
securessl-pst1.tessituranetworkhost.com
incapsula.com
securessl-eu.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
sdna-paloapp.tessituranetworkramp.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
*.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-ap.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-mst1.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est2.tessituranetworkhost.com
securessl-pst1.tessituranetworkhost.com
securessl-eu.tessituranetworkhost.com
securessl-cst1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com
securessl-est1.tessituranetworkhost.com

Certificate

The complete raw certificate details for securessl-pst1.tessituranetworkhost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH2FsTwTyJkKZZyPovUe
AjW/7CEmG2Pg0jMZ5O7OIm20Z8xHkEiQIeRl3mzRQfrhDahFSX0DbagWOyblOJpN
WzrrdOk5Hqsy7YLwrrXUe48QYefADc744FHVMg0Kal/luUOAMwHzxoshbJskq+tg
NkvCIFpBBo23ynVxk8vNJZrc8/Jc2z4cbJIrVb4tLX9PEGeluWAsOF7naJu4P/rt
Mhx1MJoofrD/hZvVaFzlOtExKji9nsMAO8pgSDUw5CrsuC4o87XaODtzAonXwfiq
sa3Br0f/xqeKtEeZfzEdnafsNUJkRgIl0FFqX1Iv403Dah4uZCjXW6cW/iHfMC+u
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2283859470709265939511541605572392984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securessl-pst1.tessituranetworkhost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24299651874820396650932691109299503459836253722809746277122317799327448028564785650220227881592776194973293525133982268776619640553938256614304402695133974806782821436519761086542866740036652461841504165475274520513676597500101865175749793713721683857783919646144832935198339126190973940396614264333090534997019228888232541552816835505615216363961292794802761786195782934296315521318622880890204801588449775286358968842183133459444540538861928511715559202882603737249840829080692397447431499111204637283539334845823363295470875208186089211089162845033872262249787804921084506261388790795184189881637378535040679390927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a84c715cb2f37af95d2871d4888796ca72c15b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1636 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securessl-pst1.tessituranetworkhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artistsrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.berkeleyrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.broadwayrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.artcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ensembletheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.galloarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.granadasb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.groundlings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haughpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.lagunaplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfestival.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lobero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lfjcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.orsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pasadenaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.pcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.philharmonicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.sdrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.sandiegosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.seattlesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordjazztickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordlivetickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto.stanfordtickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mondaviarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewallis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lutherburbankcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.worldofspeed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.ybca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-tickets.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.honolulumuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hawaiiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiahistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mopop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.thetech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lamasterchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.afi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.pacificchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.vancouveropera.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lamiradatheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesmithcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiamusicaltheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction.theconrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.montalvoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natest.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.broadwaysacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cerritoscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.acttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naramptest.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sunsetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.calacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouversymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foxtheaterspokane.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166c222ef860000040300473045022100ce8565225219f275c84838bd00b5c717cf273baedfbb5da6e06088882b1cc1dd022053bdf80a524460f6e370be71f302f5e75d5f38902b892d0e40ccc353896204b30076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166c222f0580000040300473045022100d7774479793bc70b2b386d44a9a6e6910473d589bf13fccd9a67316d60db42a70220615c0593d06ad5d6a94b912d74ec34e65ea534ee2b16d8d9195b6b600fe404cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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