san-11-s50.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:49:8a:f6:35:a1:60:ce:6a:85:a8:58:7d:9c:15:27 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:49:8a:f6:35:a1:60:ce:6a:85:a8:58:7d:9c:15:27
Serial Number (int): 11015680116203451572035340294355162407
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5e:be:25:2c:65:74:02:46:70:4c:8c:b2:82:27:de:88:84:54:74:6d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 41:cc:75:cd:bd:6c:bb:27:eb:18:65:f9:90:22:14:c9:a4:80:3d:c6
Fingerprint (sha256): 59:b0:07:f4:40:b0:5a:a1:ba:ea:bf:6c:83:70:50:70:63:5f:fb:71:d3:bb:c2:60:cb:2d:5f:9f:1f:d9:ef:3b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-11-s50.tlsprovisioning.exacttarget.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-11-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-11-s50.tlsprovisioning.exacttarget.com
image.oficial.realvalladolid.es
image.pl.chiesi.com
image.sem-communication.volkswagen.com
image.traveladvisors.exoticca.com
image.email.latinroutes.co.uk
image.email.viivhealthcare.com
image.email.wilton.com
image.hub.libertyiptransit.com
image.news.coop.ch
image.news.hyundai-privileges.fr
image.campaign.arlafoodsingredients.com
image.cloud.qualityhosting.de
image.email.chervo.com
image.mail.glassicasino.in
image.sem-communication.volkswagen-commercial-vehicles.com
image.avpartsmaster.co.uk
image.comunicaciones.endesa.es
image.comunicados.zurichseguros.com.ec
image.driveflee-mail.it
image.em.quintessentially.com
image.email.kinto.services
image.global-marketing.basf.com
image.global-marketing-training.basf.com
image.info.apicilconnect.com
image.news.yves-rocher.com
image.email.raiffeisen.ro
image.mg.bm-cat.com
image.info.nomadcasino.com
image.mail.business-punk.com
image.news.teddy-smith.com
image.assets.idorsia.us
image.email.edenred.co.uk
image.email.porovnajto.sk
image.loans.latitudefinancial.com.au
image.middleeast.zurich.ae
image.news.le19m.fr
image.panels.mediametrie.fr
image.sfb.cofinamedia.pt
image.sfb.eventoscofina.pt
image.cm.salewa.com
image.email.iper.it
image.lp.porscheromania.ro
image.your.qmul.ac.uk
image.members.quitgenius.com
image.cm.dynafit.com
image.customer.torqeedo.com
image.news.ita-airways-cargo.com
image.mkt.newshidea.com
image.professional.cetaphil.com
image.comms.sjp.co.uk
image.email.gainconnect.com
image.news.school-rag.com
image.email.srovnejto.cz
image.medical.eucerin.com
image.newsletter.kusmitea.com
image.comunicacion.burgoscf.es
image.idealfi.eu
image.mail.gbc-team.com
image.mail.stadarna.se
image.bppulse.email
image.europe-fleet.bp.email
image.e.blubeempayments.com
image.newsletter.ventis.it
image.cm.mountain-shop.com
image.professional.oracea.com
image.carama.email
image.email.costaedutainment.it
image.email.cstsavings.ca
image.mail.lidlplus.ee
image.crm.kosmos.de
image.info.hallon.se
image.nyhedsbrev.dgibyen.dk
image.cars.mercedes-benz.it
image.comms.livewell.zurich.com
image.email.fullsix.pt
image.mail.mobileworldcapital.com
image.mail.parcel.dhl.be
image.ocrm7.pearson.com
image.ocrm8.pearson.com
image.ocrm9.pearson.com
image.benenden-health.co.uk
image.e.regiebouw.nl

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-11-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurDK6rnajHnnDBi5j9tD
hTnzj4XZwPTDEvlpZbpB+IrRy5vIbrgtdTO10yfQAQp81KOrzywPXCwBltsYTkMj
DaABIcyaMtpDwl4DA5FVg/j+FJVfCC8I7w85aP33u+7C4UsO3tqs+vmVVssl1xcl
2G1PppVRV+OWTP9HepSGPgLyb3TZp1xFp8DeS2XmOmYy165k8cO5c3tyf8UN+OUm
y0tRaC/IO/Yxb0tjy0x2S180hRn0/6mQC1Nyf4xUPAUdnNRQlVz23GGtwUiqw6N4
wKZLfrosVVKIdPItKDNqjcdFxevzNw7wknyEQ7PW3r6+tWgQAXLLSFa6igFKI6W6
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11015680116203451572035340294355162407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-11-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23567504425741561309436760465106169794862561507156463619781711204644986856776988675830244635069334315148285140120595152054334128697522008746479413279216609097678372314226643676139303509102361824610246572692924792265323738423524591786240434294267019236999106598078887827702336505095862864304611897891203966396433259067104871718171625415006943719602387734739290572355574012509073096395979946919216586015595940193871901060922275502343162694037382566243461018720862923524919918011556145494050857934367433939220827460810713777732928323615850639705377672718009911967547893522011419884484560070724085527239339830351564749469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ebe252c65740246704c8cb28227de888454746d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2376 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-11-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.oficial.realvalladolid.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pl.chiesi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sem-communication.volkswagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.traveladvisors.exoticca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.latinroutes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.viivhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hub.libertyiptransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.hyundai-privileges.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campaign.arlafoodsingredients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.qualityhosting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chervo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.glassicasino.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sem-communication.volkswagen-commercial-vehicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.avpartsmaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.endesa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicados.zurichseguros.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.driveflee-mail.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.quintessentially.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kinto.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global-marketing.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global-marketing-training.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.apicilconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.raiffeisen.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mg.bm-cat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.nomadcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.business-punk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.teddy-smith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.assets.idorsia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.edenred.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.porovnajto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.loans.latitudefinancial.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.middleeast.zurich.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.le19m.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.panels.mediametrie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfb.cofinamedia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfb.eventoscofina.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cm.salewa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.iper.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.porscheromania.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.qmul.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.quitgenius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cm.dynafit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customer.torqeedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.ita-airways-cargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.newshidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.professional.cetaphil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.sjp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.gainconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.school-rag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.srovnejto.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medical.eucerin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.kusmitea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.burgoscf.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.idealfi.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.gbc-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stadarna.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bppulse.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.europe-fleet.bp.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.blubeempayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.ventis.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cm.mountain-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.professional.oracea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.carama.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.costaedutainment.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cstsavings.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lidlplus.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.kosmos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.hallon.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nyhedsbrev.dgibyen.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cars.mercedes-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.livewell.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fullsix.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mobileworldcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.parcel.dhl.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ocrm7.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ocrm8.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ocrm9.pearson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.benenden-health.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.regiebouw.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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