akamai-san194.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 07:cf:31:f3:c9:6e:be:0a:77:1c:b2:2b:fd:b0:00:55 was issued on by DigiCert Inc.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:cf:31:f3:c9:6e:be:0a:77:1c:b2:2b:fd:b0:00:55
Serial Number (int): 10380414573065556584447355693059539029
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 51:db:6d:79:33:ae:df:76:bb:ad:ff:99:ba:8d:a6:68:e3:36:e6:f8
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): 57:88:f6:78:ab:a7:4c:b3:95:eb:a3:58:90:9a:3b:1c:9f:16:aa:2b
Fingerprint (sha256): 65:21:97:dd:55:2c:ca:6f:a2:37:32:d8:10:3a:a6:6f:1a:f2:97:24:c0:18:4a:75:36:38:eb:e5:56:8e:90:af

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate akamai-san194.exacttarget.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akamai-san194.exacttarget.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akamai-san194.exacttarget.com
image.agent.thehartford.com
image.autoserviciomapfre.com.co
image.bid.auctionzip.com
image.bid.invaluable.com
image.canalonline.previsorageneral.com
image.cib.coronation.co.za
image.clientesmapfre.com.pe
image.comms.bsf.co.nz
image.dongkukmail.com
image.e.infinitebidding.com
image.e.invaluable.com
image.e.viega.com
image.e.wyndhamcapital.com
image.em.levi.co.kr
image.em.levi.in
image.em.levi.jp
image.em.levis.com.au
image.email.mapfretecuidamos.es
image.email.sonnet.ca
image.email.usengagement.com
image.email-freepik.com
image.e-offers.dominos.com
image.facebook-research.facebookmail.com
image.family.thailandpostprivilege.com
image.frl-research.facebookmail.com
image.hcp.morphosys.com
image.informacion.mapfre.com.mx
image.insurance.lv.co.uk
image.insurance.thehartford.com
image.investor.thehartford.com
image.mail.jagermeister.com
image.mercuryholidaysmail.com
image.news.coronation.co.za
image.notices.nh.gov
image.now.fivestarprofessional.com
image.sewellmotors.com
image.subscribe.stratfor.com
image.tallpoppy-email.co.nz

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for akamai-san194.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE0Rjaxp6eXTqPu04rqgjTGQL8K0yv
DWjf7CqVV9UHTTA0MU2MvE7Wvkg7lkFSaTfh9+uZtum9o+ps4RPqG7SYGQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10380414573065556584447355693059539029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akamai-san194.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d118dac69e9e5d3a8fbb4e2baa08d31902fc2b4caf0d68dfec2a9557d5074d3034314d8cbc4ed6be483b9641526937e1f7eb99b6e9bda3ea6ce113ea1bb49819
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51db6d7933aedf76bbadff99ba8da668e336e6f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai-san194.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.agent.thehartford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.autoserviciomapfre.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bid.auctionzip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bid.invaluable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.canalonline.previsorageneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cib.coronation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientesmapfre.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.bsf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dongkukmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.infinitebidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.invaluable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.viega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.wyndhamcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.levi.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.levi.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.levi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.levis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mapfretecuidamos.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sonnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.usengagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-freepik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-offers.dominos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.facebook-research.facebookmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.family.thailandpostprivilege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.frl-research.facebookmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hcp.morphosys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.informacion.mapfre.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insurance.lv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insurance.thehartford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.investor.thehartford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.jagermeister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mercuryholidaysmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.coronation.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notices.nh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.now.fivestarprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sewellmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.subscribe.stratfor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tallpoppy-email.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23665086212937226719464384132010347637322603246485316151108502172548649735169408434794537324918035185106618258052148
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5708020635722836783777483669505802929482910061174661998247708407516227745332021020336428719766530557869580373817291