san-1-s11.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:2f:e6:f9:5a:a7:a6:9d:ed:f5:4d:46:d2:11:cd:44 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2f:e6:f9:5a:a7:a6:9d:ed:f5:4d:46:d2:11:cd:44
Serial Number (int): 4236406649783518775188294482315562308
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3b:c1:50:c3:ac:19:33:7f:b8:9b:e0:b3:44:ed:75:2b:71:c6:bc:02
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ba:1a:b8:e2:e0:df:d9:6c:c2:e7:38:b5:d1:88:76:f9:9f:e5:6f:6d
Fingerprint (sha256): 4f:df:3e:eb:57:ce:1d:85:94:8d:b6:78:b6:0b:61:bc:7a:8c:6b:69:29:dd:f4:d9:e3:e6:18:cc:0c:eb:04:fa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-1-s11.tlsprovisioning.exacttarget.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-1-s11.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-1-s11.tlsprovisioning.exacttarget.com
image.email.ames.com
image.email.asusmembers.com
image.email.campanhasbitz.com
image.email.childrenscancer.org
image.email.delawarenorth.com
image.email.emblemcannabis.com
image.email.gorewards.com.ph
image.email.homeoutlet.com
image.email.lac.com
image.email.livea.com
image.email.lively.com
image.email.simple2u.com.br
image.email.theclimatepledge.com
image.email.unbound.org
image.email.visionps.com
image.email2.magazineline.com
image.email-maximcrane.com
image.email-reverie.com
image.emba.sloan.mit.edu
image.emkt-idashop.com
image.events.wfcentral.cn
image.futurefemaleentrepreneurs.com.au
image.info.fxnutrition.com
image.info.gskhealthpartner.com
image.info.olightstore.com
image.info.onecentralrewards.com
image.info.patinarestaurantgroup.com
image.infodigitaltv.com.bo
image.learn.grcforte.com
image.lowell.uml.edu
image.m.clearlydental.com.au
image.m.dentalcarenetwork.com.au
image.m.mintdsmile.com.au
image.mailer.tatastudi.com
image.mailmysg.unicharm.com
image.mail-snapone.com
image.mc.unc.edu
image.mcemail.hbfdental.com.au
image.mkt-midlandsb.com
image.mkt-oncoclinicas.com
image.msg.makuake.co.jp
image.msmedia.marketscale.com
image.myconsumermedical.com
image.news.landmark.hk
image.novidade.casasbahia.com.br
image.novidade.extra.com.br
image.novidade.pontofrio.com.br
image.nrscwins.com
image.premisemembers.com
image.quote.freeratereport.com
image.response.certainteed.com
image.sales.ig.com.br
image.seguros.mag.com.br
image.sf.cfan.org
image.sf.forrester.com
image.sf.whirlpool.com
image.sfmc.betstar.com.au
image.sfmc.bookmaker.com.au
image.sfmc.ladbrokes.com.au
image.sfmc.neds.com.au
image.sfmc.silverarrows.in
image.sistemaailos.coop.br
image.solutions.bunge.com
image.ypo-mail.org
image.accountsvc.com
image.atlasrojinegro.com
image.benefits.partnercomm.net
image.boston.umb.edu
image.bullseyecx.net
image.c4fplaycity.com
image.campanhasbradescocartoes.com.br
image.clubsantoslaguna.org
image.comms.universalproductionmusic.com
image.communication.tataclassedge.com
image.communications.staypineapple.com
image.comunicado.copercana.com.br
image.crm.ibp.org.br
image.crmsf.colombo.com.br
image.e.careadviser.com
image.e.hixny.org
image.e.mycarepathways.com
image.e.paybright.com
image.e.turtlebayresort.com
image.e.ulta.com
image.e.wellbyfinancial.com
image.em.aliceandolivia.com
image.em.boldorange.com
image.em.childrensnational.org

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-1-s11.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyNLK5FFXrwqFLBtbKQj
O3EwxgQTDPXy7T6WT9wv3NRPjvdSbV8ri61M9OpGuJxs63Negr9OILRKFF6Rw1or
Cdbkcnsy+vMmy9fvLkaQjEeXe+dYCxBGtG57OQrhrMRG+1CPKE2HH4FM0K33vO2D
EXCTNEmrOGA1Iq08ad5t2QM6/x5AWcsu7CIAcpPi4GW2SpqUjt2FI97gsSThFIi9
BflwJYZgF+e/z5fVgNQn+Kv7zRtUKkRsZfuQqhNjbOditaiFk3F893Ws3LqDSgdJ
1v695Im21PQmPhVoyxp5w0XOS2B5szulZ/u7KMNPhcvZDhSc5XXZy7ejeYmURjcW
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4236406649783518775188294482315562308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-1-s11.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21604154088546700768616480859075569309776042695003350273627469707897786469735530917164324260991394254617370276963602165446011361969510138458211652611623860829496411449215588239352925790659737530593613554951075588248324812882650981632591285579917078131761712789579014797536874062683823047737434496584671838742913759968338795497027806116032490339304940013406356248071366158495013779310109669269404257113625378851638086602496704879803085010885916153341748237003929949081834185622911880724551479046239701610516980168278967648747842432594434524956484871576569079299891969946510139464647773922227090931150692898890872985167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bc150c3ac19337fb89be0b344ed752b71c6bc02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2498 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-1-s11.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.asusmembers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.campanhasbitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.childrenscancer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.delawarenorth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.emblemcannabis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.gorewards.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.homeoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.livea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lively.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.simple2u.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.theclimatepledge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.unbound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.visionps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email2.magazineline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-maximcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-reverie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emba.sloan.mit.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emkt-idashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.events.wfcentral.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.futurefemaleentrepreneurs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fxnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.gskhealthpartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.olightstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.onecentralrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.patinarestaurantgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.infodigitaltv.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.learn.grcforte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lowell.uml.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.clearlydental.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.dentalcarenetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.mintdsmile.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailer.tatastudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailmysg.unicharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-snapone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.unc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mcemail.hbfdental.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt-midlandsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt-oncoclinicas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msg.makuake.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msmedia.marketscale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.myconsumermedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.landmark.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidade.casasbahia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidade.extra.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidade.pontofrio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nrscwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.premisemembers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.quote.freeratereport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.response.certainteed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.ig.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.seguros.mag.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.cfan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.forrester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.whirlpool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.betstar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.bookmaker.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.ladbrokes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.neds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.silverarrows.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sistemaailos.coop.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.solutions.bunge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ypo-mail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.accountsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.atlasrojinegro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.benefits.partnercomm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.boston.umb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bullseyecx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c4fplaycity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campanhasbradescocartoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubsantoslaguna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.universalproductionmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.tataclassedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.staypineapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicado.copercana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.ibp.org.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crmsf.colombo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.careadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hixny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mycarepathways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.paybright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.turtlebayresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.ulta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.wellbyfinancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.aliceandolivia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.boldorange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.childrensnational.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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