san-11-s13.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:1c:8b:b9:15:75:33:61:38:a7:b7:4c:f2:cc:03:50 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:1c:8b:b9:15:75:33:61:38:a7:b7:4c:f2:cc:03:50
Serial Number (int): 2806674222394651801748244178085348176
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: db:c4:de:e6:d7:55:c2:f7:ad:74:5c:20:49:fc:6c:2b:03:09:d9:a4
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): fa:35:1f:e0:01:52:4b:04:56:80:70:44:99:bb:82:8b:53:ea:1d:24
Fingerprint (sha256): 64:f6:46:a7:fa:69:6f:df:b0:cd:c7:5b:9e:dc:1e:4c:23:a6:f2:94:d4:42:68:f4:83:87:05:02:5d:05:23:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-11-s13.tlsprovisioning.exacttarget.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-11-s13.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-11-s13.tlsprovisioning.exacttarget.com
image.info.southside.edu
image.marketing.safesteptub.com
image.media.rankworks.com
image.advancement.regis.edu
image.ipi.ipirangacomunica.com.br
image.co.email.betway.us
image.e.healthyworldpharmacy.com.au
image.ia.email.betway.us
image.in.email.betway.us
image.clientes.toulon.com.ar
image.connect.singaporetech.edu.sg
image.email.ecobici.mx
image.seekercommunications.wbd.com
image.isncrm.com
image.mail.ymcahbb.ca
image.mc.fsinvestments.com
image.omnorthbaires.com
image.teampape.com
image.marketing.forgehealth.com
image.email.finanzero.com.br
image.em.bloom-luxe.jp
image.nestglobedigi.com
image.contato.clubecasadesign.com.br
image.e.montlick.com
image.info-frisia.coop.br
image.sfma.netsea.jp
image.silanesmarketing.com
image.caoa360.com
image.connect.flame.edu.in
image.e.yonda.com.au
image.info-aforeazteca.com.mx
image.info-segurosazteca.com
image.conteudo.eurochemsam.com
image.ourboatsyourfun.com
image.tablo.outsetmedical.com
image.contatobrasal.com.br
image.sfmc.theyounionlive.in
image.cpt365.org
image.eurocomunica.com.br
image.info.eteros.com
image.mail.mayferjoyas.com
image.rmofertas.com
image.smc.wakudoki.ne.jp
image.comunicaciones.camconnection.com
image.mavsmail.com
image.email.ves.com
image.marketing.avla.com
image.email.carnegiescience.edu
image.engage.visitvictoria.com.au
image.communications.manbafinance.com
image.e.fuse.org
image.e.plus.qvc.com
image.email.spellingbee.com
image.email.picknpull.com
image.news.offerfit.ai
image.tu360comprasbancolombia.com.co
image.marketing.gsquarehousing.com
image.email.fcsamerica.com
image.marketing.allam.com.au
image.mc.citadelsecurities.com
image.mktg.myrealestate.co.in
image.email.agdirect.com
image.email.clearchoicepoolcaretx.com
image.email.frontierfarmcredit.com
image.email.kindercare.com
image.resilmkt.com.br
image.connect.zerotothree.org
image.email.quarkexpeditions.com
image.clientesprocredito.mx
image.em.kitterytradingpost.com
image.mkt.vaportec.com.br
image.mortgage.movement.com
image.tradewindaviation.info
image.email.ecapital.com
image.sms.email.ncdhhs.gov
image.sunteckindia.co
image.support.cpa-jobs.jp
image.akky.com.mx
image.avisos.ado.com.mx
image.email-pepsico.es
image.bicehipotecaria.cl
image.e.thrivent.com
image.email.blueassist.com.au
image.email.wbur.org
image.e.vero.com.au
image.email.yourbehavioralhealth.com
image.updates.coinbaseam.com
image.business.aloo.com.br
image.mail.kose.com.sg
image.marketing.pencewealth.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-11-s13.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5AbmppWuT8olL97iZxI
d8Tgrf2JqEJURrJZHFmVF7fhurfKpUKVErFBklbAG9lB2R39rZcadP/AoLKeBHGe
dgsOQJDB5g1xJrH8CiNdFXcGAl9MRRwXDayUdHT3mJzdtMRabLUfzYh7XT1TBdBL
Dm7mF+3OqI/A77xWqULyXzaeSYglkOS2SNOzq3soQD2Y4BzAAIgKK0Pq4vYvM6Bj
bMaZBNXCG68Vie86F5xfjH6Ku9D/L8hyukSUUkIM8GIytO5XPeHUe3NrkLV/wAZL
gWmaVOChIAeCTmCfop1fXXKiTXTYS4YVcHmYa0H986az/6UY6oTuelZB1vhqtBf+
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2806674222394651801748244178085348176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-11-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23677625247067685063017395829254609812358096629539896831048475313066747343362873889538145830635129467892774829167835443392208469837687273648969445811511681484979592555752855417027119731890814248923089526631155727145663384150012642926775955616046382347243066305128570723680660035439048080078356127738923242321930575468799211801417120467694540554968587724691796095378108274268337757465651113790238715151387562364712117235506765920040507984094632816217038876571117045084121559348068919417523407964530262201188074101629942425251879000452632123658112687543471131375162011582449109845445910563037057704878661681017758678569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbc4dee6d755c2f7ad745c2049fc6c2b0309d9a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2564 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-11-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.southside.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.safesteptub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.media.rankworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advancement.regis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ipi.ipirangacomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.co.email.betway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.healthyworldpharmacy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ia.email.betway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.in.email.betway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientes.toulon.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.singaporetech.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ecobici.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.seekercommunications.wbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.isncrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ymcahbb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.fsinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.omnorthbaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.teampape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.forgehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.finanzero.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.bloom-luxe.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nestglobedigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contato.clubecasadesign.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.montlick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-frisia.coop.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfma.netsea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.silanesmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.caoa360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.flame.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.yonda.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-aforeazteca.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-segurosazteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.eurochemsam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ourboatsyourfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tablo.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contatobrasal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.theyounionlive.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cpt365.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eurocomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.eteros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mayferjoyas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rmofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.wakudoki.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.camconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mavsmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.avla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.carnegiescience.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.visitvictoria.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.manbafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fuse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.plus.qvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.spellingbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.picknpull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.offerfit.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tu360comprasbancolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.gsquarehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fcsamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.allam.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.citadelsecurities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.myrealestate.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.agdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clearchoicepoolcaretx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.frontierfarmcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kindercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.resilmkt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.zerotothree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.quarkexpeditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientesprocredito.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.kitterytradingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.vaportec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mortgage.movement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tradewindaviation.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sms.email.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sunteckindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.support.cpa-jobs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.akky.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.avisos.ado.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-pepsico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bicehipotecaria.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.thrivent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.blueassist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wbur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vero.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.yourbehavioralhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.coinbaseam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.business.aloo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kose.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.pencewealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a6122cc824cd8bb152f9907225be1e266085178f167c8b1ae6c99e5ec71a88d641514971f368abb700a3e79388ab77729564b8fbe6032698d22ed8d3254fdeb324290b05fd741bd9fa4aec6d40ce350b15a34cb64368ab05d397492f9a9230c7400be2fb5c08410452a01110087298d3e1a3b05b61c46e94bc0e70f9ca2dede0d7e2f39a15efb72724aaee5d13a92266e20ef4685ae498996609a2cf0f10882959eb3423f322088f12fc36222849058ff685c057f0a9d5f39b2c477ab74d55532a618f410a7c574d6e8ab7329bf62269ebaf9f4868eb679ebe3edd4572fcf5654a871771ea28e9dd5206cbe9dbc5d05a53ee65ca02211fbbbcb8bd0ebe0e22a9