san-12-s50.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:f7:a8:f4:07:7e:92:5d:b3:09:43:85:5e:7d:27:82 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:f7:a8:f4:07:7e:92:5d:b3:09:43:85:5e:7d:27:82
Serial Number (int): 9261292077572075538774944345889777538
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 93:75:12:9a:68:4d:bd:0f:77:74:66:9a:66:e9:71:eb:08:b3:0a:da
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 03:82:4e:5b:cf:26:3f:30:09:c4:69:71:83:40:83:6f:97:59:05:ba
Fingerprint (sha256): 62:55:3a:72:e8:8c:d0:8b:a9:e8:27:71:3d:8b:48:44:bd:cd:95:37:58:f7:84:93:48:54:38:35:8f:1c:22:5b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-12-s50.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-12-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-12-s50.tlsprovisioning.exacttarget.com
image.marketing.testaankoop.be
image.mc.chimieyewear.com
image.mc.dfv-fleisch-backmedien.de
image.meinpoco.com
image.mylexus.lexus.lu
image.mytoyota.toyota.lu
image.nabacloud.naba.it
image.news.coop-city.ch
image.news.cving.com
image.news.fooby.ch
image.news.fostershollywood.es
image.news.impo.ch
image.news.interwetten.com
image.news.laeckerli-huus.ch
image.news.livique.ch
image.news.lumimart.ch
image.news.yves-rocher.com.tr
image.newsletter.environnement.brussels
image.notificacoes.avantenestle.com.br
image.novidades.gatopreto.com
image.onecommunity-eg.com
image.online.aromas.es
image.paulandshark.news
image.portobusinessschool.pt
image.qa-marketing.xarvio.com
image.quviviq.com
image.roxi.tv
image.rsdta.tst.randstadgroep.nl
image.rsmsg.randstad.nl
image.sf.oxylio.com
image.talk.baldinini.it
image.trib3studios.com
image.ttmsg.tempo-team.nl
image.twoj.santanderconsumer.pl
image.web.domusacademy.it
image.zurichintlife.co.uk
image.anz.castrol.email
image.c.rituals.com
image.campagne.zurich.it
image.campagnecrm.zurich-connect.it
image.centrodiagnosticoitaliano.com
image.cloudacb.com
image.comms.diageo.com
image.comms.healthservice.ie
image.communication.vwcv.ie
image.communications.ana-natural-performance.com
image.coronadirect.be
image.crm.nissan.com.eg
image.e.hubsub.nl
image.e.hummel.dk
image.e.oneandonlyresorts.com
image.email.ba-sh.com
image.email.beds.es
image.email.biholiday.com
image.email.bisol.it
image.email.campagnolo.com
image.email.dubaifuture.ae
image.email.ferraritrento.it
image.email.gruppolunelli.it
image.email.head.com
image.email.ideeperviaggiare.it
image.email.locandamargon.it
image.email.mainova.de
image.email.merlinbreaks.co.uk
image.email.movelia.es
image.email.new-weight.de
image.email.operaballet.nl
image.email.paultonsbreaks.com
image.email.quatre-pattes.org
image.email.segnana.it
image.email.surgiva.it
image.email.tenutelunelli.it
image.experience.geely.co.il
image.global.castrol.email
image.hello.rustica.fr
image.hello.systemed.fr
image.info.coimaht.com
image.info.euc.ac.cy
image.info.jumbo.ch
image.info.mof.gov.il
image.info.open.ac.uk
image.info.rcibanque.com
image.info.rcifinancialservices.co.uk
image.info.tinabanasalud.es
image.komunikaty.nestbank.info
image.link.hellofresh.jp
image.mail.chemaxon.com
image.mail.hellosmoove.com
image.mail.nestlehealthscience.ca
image.mail.news-doppelganger.it
image.mail.theprogress-group.co.uk
image.mail-bonaldi.eurocaritalia.it
image.mailer.nomobank.com
image.mail-vicentini.eurocaritalia.it
image.marketing.shamir.pt

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-12-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP7DCCDtSgAwIBAgIQBveo9Ad+kl2zCUOFXn0ngjANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE
aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQw
MTI5MDAwMDAwWhcNMjUwMjI4MjM1OTU5WjCBjjELMAkGA1UEBhMCVVMxEzARBgNV
BAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xHTAbBgNVBAoT
FFNhbGVzZm9yY2UuY29tLCBJbmMuMTMwMQYDVQQDEypzYW4tMTItczUwLnRsc3By
b3Zpc2lvbmluZy5leGFjdHRhcmdldC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqHhR0uW6jfDuK4d5L3S+BqRiP0KuJVKcvI7E5Lu5QNeYQMwXL
f6os7fA+ja4Suj56lJic2DSvhrtt/g4BMhCsUEOg8Wx09jZR08f/+nqf4Bbrq9+e
uV5dIGyQUQ0cLEvMILxrm3KrFeQbVcR7tJcoNfqlR4G1h2ACgFnLam4IBlyzhGHA
ayoRe2ktA3mj3h0fteD3X7RIY3c5noqdKMtYQSrlkiAv19QtTnbEtK0l5bJmapGt
hPrDFooXJA/zKOJ+N1ih3GyYqnaEZRKOXXURXxNINFYxU3lRyzzXxVEyklx6MRqv
4sO4HDlq9kaSENYVdngwwBHrcIoEGXz32N3pAgMBAAGjggx4MIIMdDAfBgNVHSME
GDAWgBR0hYDAZsffN97PvSk3qgMdvu3NFzAdBgNVHQ4EFgQUk3USmmhNvQ93dGaa
Zulx6wizCtowggpyBgNVHREEggppMIIKZYIqc2FuLTEyLXM1MC50bHNwcm92aXNp
b25pbmcuZXhhY3R0YXJnZXQuY29tgh5pbWFnZS5tYXJrZXRpbmcudGVzdGFhbmtv
b3AuYmWCGWltYWdlLm1jLmNoaW1pZXlld2Vhci5jb22CImltYWdlLm1jLmRmdi1m
bGVpc2NoLWJhY2ttZWRpZW4uZGWCEmltYWdlLm1laW5wb2NvLmNvbYIWaW1hZ2Uu
bXlsZXh1cy5sZXh1cy5sdYIYaW1hZ2UubXl0b3lvdGEudG95b3RhLmx1ghdpbWFn
ZS5uYWJhY2xvdWQubmFiYS5pdIIXaW1hZ2UubmV3cy5jb29wLWNpdHkuY2iCFGlt
YWdlLm5ld3MuY3ZpbmcuY29tghNpbWFnZS5uZXdzLmZvb2J5LmNogh5pbWFnZS5u
ZXdzLmZvc3RlcnNob2xseXdvb2QuZXOCEmltYWdlLm5ld3MuaW1wby5jaIIaaW1h
Z2UubmV3cy5pbnRlcndldHRlbi5jb22CHGltYWdlLm5ld3MubGFlY2tlcmxpLWh1
dXMuY2iCFWltYWdlLm5ld3MubGl2aXF1ZS5jaIIWaW1hZ2UubmV3cy5sdW1pbWFy
dC5jaIIdaW1hZ2UubmV3cy55dmVzLXJvY2hlci5jb20udHKCJ2ltYWdlLm5ld3Ns
ZXR0ZXIuZW52aXJvbm5lbWVudC5icnVzc2Vsc4ImaW1hZ2Uubm90aWZpY2Fjb2Vz
LmF2YW50ZW5lc3RsZS5jb20uYnKCHWltYWdlLm5vdmlkYWRlcy5nYXRvcHJldG8u
Y29tghlpbWFnZS5vbmVjb21tdW5pdHktZWcuY29tghZpbWFnZS5vbmxpbmUuYXJv
bWFzLmVzghdpbWFnZS5wYXVsYW5kc2hhcmsubmV3c4IcaW1hZ2UucG9ydG9idXNp
bmVzc3NjaG9vbC5wdIIdaW1hZ2UucWEtbWFya2V0aW5nLnhhcnZpby5jb22CEWlt
YWdlLnF1dml2aXEuY29tgg1pbWFnZS5yb3hpLnR2giBpbWFnZS5yc2R0YS50c3Qu
cmFuZHN0YWRncm9lcC5ubIIXaW1hZ2UucnNtc2cucmFuZHN0YWQubmyCE2ltYWdl
LnNmLm94eWxpby5jb22CF2ltYWdlLnRhbGsuYmFsZGluaW5pLml0ghZpbWFnZS50
cmliM3N0dWRpb3MuY29tghlpbWFnZS50dG1zZy50ZW1wby10ZWFtLm5sgh9pbWFn
ZS50d29qLnNhbnRhbmRlcmNvbnN1bWVyLnBsghlpbWFnZS53ZWIuZG9tdXNhY2Fk
ZW15Lml0ghlpbWFnZS56dXJpY2hpbnRsaWZlLmNvLnVrghdpbWFnZS5hbnouY2Fz
dHJvbC5lbWFpbIITaW1hZ2UuYy5yaXR1YWxzLmNvbYIYaW1hZ2UuY2FtcGFnbmUu
enVyaWNoLml0giNpbWFnZS5jYW1wYWduZWNybS56dXJpY2gtY29ubmVjdC5pdIIj
aW1hZ2UuY2VudHJvZGlhZ25vc3RpY29pdGFsaWFuby5jb22CEmltYWdlLmNsb3Vk
YWNiLmNvbYIWaW1hZ2UuY29tbXMuZGlhZ2VvLmNvbYIcaW1hZ2UuY29tbXMuaGVh
bHRoc2VydmljZS5pZYIbaW1hZ2UuY29tbXVuaWNhdGlvbi52d2N2LmllgjBpbWFn
ZS5jb21tdW5pY2F0aW9ucy5hbmEtbmF0dXJhbC1wZXJmb3JtYW5jZS5jb22CFWlt
YWdlLmNvcm9uYWRpcmVjdC5iZYIXaW1hZ2UuY3JtLm5pc3Nhbi5jb20uZWeCEWlt
YWdlLmUuaHVic3ViLm5sghFpbWFnZS5lLmh1bW1lbC5ka4IdaW1hZ2UuZS5vbmVh
bmRvbmx5cmVzb3J0cy5jb22CFWltYWdlLmVtYWlsLmJhLXNoLmNvbYITaW1hZ2Uu
ZW1haWwuYmVkcy5lc4IZaW1hZ2UuZW1haWwuYmlob2xpZGF5LmNvbYIUaW1hZ2Uu
ZW1haWwuYmlzb2wuaXSCGmltYWdlLmVtYWlsLmNhbXBhZ25vbG8uY29tghppbWFn
ZS5lbWFpbC5kdWJhaWZ1dHVyZS5hZYIcaW1hZ2UuZW1haWwuZmVycmFyaXRyZW50
by5pdIIcaW1hZ2UuZW1haWwuZ3J1cHBvbHVuZWxsaS5pdIIUaW1hZ2UuZW1haWwu
aGVhZC5jb22CH2ltYWdlLmVtYWlsLmlkZWVwZXJ2aWFnZ2lhcmUuaXSCHGltYWdl
LmVtYWlsLmxvY2FuZGFtYXJnb24uaXSCFmltYWdlLmVtYWlsLm1haW5vdmEuZGWC
HmltYWdlLmVtYWlsLm1lcmxpbmJyZWFrcy5jby51a4IWaW1hZ2UuZW1haWwubW92
ZWxpYS5lc4IZaW1hZ2UuZW1haWwubmV3LXdlaWdodC5kZYIaaW1hZ2UuZW1haWwu
b3BlcmFiYWxsZXQubmyCHmltYWdlLmVtYWlsLnBhdWx0b25zYnJlYWtzLmNvbYId
aW1hZ2UuZW1haWwucXVhdHJlLXBhdHRlcy5vcmeCFmltYWdlLmVtYWlsLnNlZ25h
bmEuaXSCFmltYWdlLmVtYWlsLnN1cmdpdmEuaXSCHGltYWdlLmVtYWlsLnRlbnV0
ZWx1bmVsbGkuaXSCHGltYWdlLmV4cGVyaWVuY2UuZ2VlbHkuY28uaWyCGmltYWdl
Lmdsb2JhbC5jYXN0cm9sLmVtYWlsghZpbWFnZS5oZWxsby5ydXN0aWNhLmZyghdp
bWFnZS5oZWxsby5zeXN0ZW1lZC5mcoIWaW1hZ2UuaW5mby5jb2ltYWh0LmNvbYIU
aW1hZ2UuaW5mby5ldWMuYWMuY3mCE2ltYWdlLmluZm8uanVtYm8uY2iCFWltYWdl
LmluZm8ubW9mLmdvdi5pbIIVaW1hZ2UuaW5mby5vcGVuLmFjLnVrghhpbWFnZS5p
bmZvLnJjaWJhbnF1ZS5jb22CJWltYWdlLmluZm8ucmNpZmluYW5jaWFsc2Vydmlj
ZXMuY28udWuCG2ltYWdlLmluZm8udGluYWJhbmFzYWx1ZC5lc4IeaW1hZ2Uua29t
dW5pa2F0eS5uZXN0YmFuay5pbmZvghhpbWFnZS5saW5rLmhlbGxvZnJlc2guanCC
F2ltYWdlLm1haWwuY2hlbWF4b24uY29tghppbWFnZS5tYWlsLmhlbGxvc21vb3Zl
LmNvbYIhaW1hZ2UubWFpbC5uZXN0bGVoZWFsdGhzY2llbmNlLmNhgh9pbWFnZS5t
YWlsLm5ld3MtZG9wcGVsZ2FuZ2VyLml0giJpbWFnZS5tYWlsLnRoZXByb2dyZXNz
LWdyb3VwLmNvLnVrgiNpbWFnZS5tYWlsLWJvbmFsZGkuZXVyb2Nhcml0YWxpYS5p
dIIZaW1hZ2UubWFpbGVyLm5vbW9iYW5rLmNvbYIlaW1hZ2UubWFpbC12aWNlbnRp
bmkuZXVyb2Nhcml0YWxpYS5pdIIZaW1hZ2UubWFya2V0aW5nLnNoYW1pci5wdDA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEigRqBEhkJodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEt
MS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds
b2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDCBhwYIKwYBBQUHAQEEezB5
MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wUQYIKwYBBQUH
MAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbEcy
VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAP3pupoz0k6uwC33+N6AHS
soBTWM9jSSBZp9HdyK1pR1DRCxntSAvqvvqbkbV2gu6IE3bN4ZNQAH6oWrPM97R5
BdDlrsfaoS9rNHc3jI19jn5wI15DeEOTXK47LaQwRxhaeUOR1E0b65bo8ilFdKZI
ifz/KoIS2pAefIV2BAdedclP9DbOYq2L+3LkgIYmG5lgUGDVkp9T7/uD5gryF1Od
0DaGRkU3s/zbP/JZEhScS+tYdxOH1rd+phDpLJqiFl+rZin92R515nVu2d8kNbLi
9AkioIUZjZJ4drV15/2ZQ6BlO9x8fHKrs3ymeBNludxZ7pA2ndJyYbpPzgmAnI4P
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h4UdLluo3w7iuHeS90v
gakYj9CriVSnLyOxOS7uUDXmEDMFy3+qLO3wPo2uEro+epSYnNg0r4a7bf4OATIQ
rFBDoPFsdPY2UdPH//p6n+AW66vfnrleXSBskFENHCxLzCC8a5tyqxXkG1XEe7SX
KDX6pUeBtYdgAoBZy2puCAZcs4RhwGsqEXtpLQN5o94dH7Xg91+0SGN3OZ6KnSjL
WEEq5ZIgL9fULU52xLStJeWyZmqRrYT6wxaKFyQP8yjifjdYodxsmKp2hGUSjl11
EV8TSDRWMVN5Ucs818VRMpJcejEar+LDuBw5avZGkhDWFXZ4MMAR63CKBBl899jd
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9261292077572075538774944345889777538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-12-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29554596316573680677771787329423829798297556672312591962503502932275868859353759681201091365275521855502703514458502173305836682152139532430220543714719267442092918104539388223050749573664974080370045824928968883734004417327510539682626043553143940791561202868114564933361062670127235000015565333142928577114179526434535335447243637258472453861354217212715920068551063266243970100990083839520649112073032355131446752763787787990869173172676396873402798848600333805225037405311254457013512352857484510972176355545078541037969192781328683576015338767143783915148121526164815431788646930522846803312281475538923785084393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9375129a684dbd0f7774669a66e971eb08b30ada
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2665 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-12-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.testaankoop.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.chimieyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.dfv-fleisch-backmedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.meinpoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mylexus.lexus.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mytoyota.toyota.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nabacloud.naba.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.coop-city.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.fooby.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.fostershollywood.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.impo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.interwetten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.laeckerli-huus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.livique.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.environnement.brussels'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notificacoes.avantenestle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidades.gatopreto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.onecommunity-eg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.online.aromas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.paulandshark.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.portobusinessschool.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.qa-marketing.xarvio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.quviviq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.roxi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rsdta.tst.randstadgroep.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rsmsg.randstad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.oxylio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.talk.baldinini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.trib3studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ttmsg.tempo-team.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twoj.santanderconsumer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.domusacademy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.zurichintlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.anz.castrol.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campagne.zurich.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campagnecrm.zurich-connect.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.centrodiagnosticoitaliano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloudacb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.diageo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.healthservice.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.vwcv.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.ana-natural-performance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.coronadirect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.nissan.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hubsub.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hummel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oneandonlyresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ba-sh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.beds.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.biholiday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bisol.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.campagnolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dubaifuture.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ferraritrento.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.gruppolunelli.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.head.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ideeperviaggiare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.locandamargon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mainova.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.merlinbreaks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.movelia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.new-weight.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.operaballet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.paultonsbreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.quatre-pattes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.segnana.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.surgiva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tenutelunelli.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.geely.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global.castrol.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.rustica.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.systemed.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.coimaht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.euc.ac.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.jumbo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mof.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.open.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rcibanque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rcifinancialservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.tinabanasalud.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.komunikaty.nestbank.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.hellofresh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.chemaxon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hellosmoove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nestlehealthscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.news-doppelganger.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.theprogress-group.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-bonaldi.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailer.nomobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-vicentini.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.shamir.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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