san-10-s11.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:34:71:47:fe:43:39:de:bf:06:57:50:f4:86:6b:d0 was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:34:71:47:fe:43:39:de:bf:06:57:50:f4:86:6b:d0
Serial Number (int): 14893805006453100598518659513632320464
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:ea:30:79:b4:f9:14:e0:90:dd:b0:f5:4d:62:c9:1c:68:12:4c:58
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2c:02:fb:bb:85:2e:62:9a:03:e4:c1:3e:33:13:c6:ed:b3:f0:a3:8f
Fingerprint (sha256): 67:6f:55:90:3e:75:37:b3:0b:89:c2:a1:81:23:0a:a3:e0:97:16:b4:06:d6:f5:ed:ee:ce:b8:4c:79:18:b4:3c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-10-s11.tlsprovisioning.exacttarget.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-10-s11.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-10-s11.tlsprovisioning.exacttarget.com
image.us.email.chattem.com
image.eml.us.miraclegro.com
image.marketing.terpel.com
image.privatebankbradesco.com.br
image.contactosuperxtra.com
image.e.bernardin.ca
image.e.foodsaver.ca
image.smc.thomasarts.com
image.sports.aegworldwide.com
image.service.studentloaninsurance.org
image.email.proboatmodels.com
image.programa.pacientesje.com
image.dominosmx.com
image.email.the4pmnews.com
image.mail.kinetic.windstream.com
image.hi.bloomnation.com
image.mail.banksanjuans.com
image.mail.collegiatepeaksbank.com
image.mail.fcbutah.com
image.mail.foothillsbank.com
image.mail.glacierbank.com
image.mail.mountainwestbank.com
image.comunicacao-exame.com
image.e.usdermpartners.com
image.marketingamg.mx
image.email.agloan.com
image.materiais.ailos.coop.br
image.e.secureserver.net
image.email.feld-inc.com
image.mkt.cemigsim.com.br
image.sams.cartaosamsclub.com.br
image.victory.cagop.org
image.email.singaporeglobalnetwork.gov.sg
image.rcmd.auone.jp
image.m.exeterfinance.com
image.e.tank-depot.com
image.victory.omfaction.com
image.email.johnrosefortn.com
image.news.portobello.com.br
image.trsm-connect.torontomu.ca
image.mail.atmameditacao.com
image.mail.vidav.com.br
image.comunicacao.dormaissaude.com.br
image.mail.vivae.com.br
image.e.fgv.br
image.email.athearn.com
image.afs.ameriprise.com
image.email.leadstarhub.com
image.insuranceprogramsinfo.com
image.info.covermark.co.jp
image.e.zoomcare.com
image.travel.snonski.com.au
image.mail.northcascadesbank.com
image.btgpactual.cl
image.em.mercurestore.com
image.mail.fsbwy.com
image.mail.ccb-idaho.com
image.mail.fsbmsla.com
image.mail.heritagebanknevada.com
image.mail.westernsecuritybank.com
image.thinq-email-lge.com
image.digital.pequenin.com
image.e-ums.maine.edu
image.info.acseine.co.jp
image.info.kesalanpatharan.co.jp
image.info.papilio.co.jp
image.info.vedavie.jp
image.em.tpo.pennymac.com
image.digital.nosotrasonline.com
image.em.luxorstore.com
image.sfmc.fhlbc.com
image.email.centralrestaurant.com
image.mail.wish.org
image.tymarketing.com
image.emails.andybarrforcongress.org
image.mail.1stbmt.com
image.email.nimblework.com
image.getcsaainsurance.com
image.email.tlracing.com
image.hyattdiningclub.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com

Certificate

The complete raw certificate details for san-10-s11.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KjCNFPmsEUJ5HkPSrDT
GFeel8DUlCLZ6W1bb62UeAWnwai85DVm3oszCrdvcCFtwvcbCE6o0zjCXzahyXBr
EGW9C6n62aNn44iz4AnGDggBG2OFglFDisV8RQggQEsFR0hubb/EsAdrCqBLk3Gl
wDMbhPXPNGyxkrqL02TEB+bs6msCB9HxP3/O0lmTQgWRyMuuy6FKMFVUXNV0+CNJ
TBh8cNZzyTT2RZG3XbyUqV+XAs1iJ5hHL1SPPCIzwz+Zs6KJvYnpL9UJtFS9HrZF
DxANp9d1fZeDJ/lvi0N/Ue4rlcrehIU8jOte46GDZOpwMmQRig0XVGzAZAPWE5O/
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14893805006453100598518659513632320464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-10-s11.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28865551504901035306013395135740177286641057047796027920992155385097597530703761359076892962684233906708765294758694155086761033365777469848278467083826420972662224460801279178104345744885126985003941432062731826185550287230331075018069920056452212097544374165605295216527164591295283106776235743444193927294659929588547707001966611252112855409478826198805585771016831336612280574697631182878034837025579096659901544996266400791334684258902795686054611914178808189838962092934118269043902494642337191623625322723021054631894024429560661312326527879213699502431881395671393302652218956117142406797595058878386630016819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8ea3079b4f914e090ddb0f54d62c91c68124c58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-10-s11.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.us.email.chattem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eml.us.miraclegro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.terpel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.privatebankbradesco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contactosuperxtra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bernardin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.foodsaver.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.thomasarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sports.aegworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.studentloaninsurance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.proboatmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.programa.pacientesje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dominosmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.the4pmnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kinetic.windstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hi.bloomnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.banksanjuans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.collegiatepeaksbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fcbutah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.foothillsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.glacierbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mountainwestbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao-exame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.usdermpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingamg.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.agloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.materiais.ailos.coop.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.secureserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.feld-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.cemigsim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sams.cartaosamsclub.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.victory.cagop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.singaporeglobalnetwork.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rcmd.auone.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.exeterfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.tank-depot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.victory.omfaction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.johnrosefortn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.portobello.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.trsm-connect.torontomu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.atmameditacao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vidav.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.dormaissaude.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vivae.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fgv.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.athearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.afs.ameriprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.leadstarhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insuranceprogramsinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.covermark.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.zoomcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.travel.snonski.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.northcascadesbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.btgpactual.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.mercurestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fsbwy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ccb-idaho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fsbmsla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.heritagebanknevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.westernsecuritybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.thinq-email-lge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.pequenin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-ums.maine.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.acseine.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.kesalanpatharan.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.papilio.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.vedavie.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.tpo.pennymac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.nosotrasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.luxorstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.fhlbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.centralrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.wish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tymarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.andybarrforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.1stbmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nimblework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.getcsaainsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tlracing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hyattdiningclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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