san-17-s50.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 0b:c9:ed:5f:32:c8:88:5b:5f:6f:bb:09:c3:2d:5e:70 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:c9:ed:5f:32:c8:88:5b:5f:6f:bb:09:c3:2d:5e:70
Serial Number (int): 15669974095667758838641535367607311984
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:60:4c:34:e2:ec:e6:a8:22:1f:1f:f5:a9:f1:68:aa:a4:21:00:b2
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): 58:8f:99:94:f7:37:e0:4d:4c:24:67:15:dc:fb:ac:e2:e0:b4:c0:29
Fingerprint (sha256): 6f:55:45:42:0f:2b:b1:f3:2b:39:a0:3c:e9:aa:66:e7:ba:cf:c9:fc:a0:a1:e2:cb:7c:3e:20:23:fb:fc:92:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate san-17-s50.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-17-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-17-s50.tlsprovisioning.exacttarget.com
image.communication.skoda.co.uk
image.communication.volkswagen.co.uk
image.communication.volkswagen-vans.co.uk
image.community.rsi.ch
image.comunicaciones.aq-acentor.com
image.comunicaciones.diariotodoalicante.es
image.contact.mobilize-fs.com
image.contact.mobilize-fs.ie
image.contact.mobilize-fs.pt
image.de.abbviecare.com
image.dialogue.santanderconsumer.fi
image.e.wallbox.com
image.e.zyn.com
image.em.ca-autobank.com
image.em.drivalia.com
image.em.infucare.com
image.email.ethara.com
image.email.four-paws.bg
image.email.four-paws.org
image.email.four-paws.org.za
image.email.fourpawsusa.org
image.email.kozminski.edu.pl
image.email.nutritionalacademy.it
image.email.rbinternational.com
image.e-mail.touchdownfrankfurt.de
image.email.vaillant.se
image.email.vesteralens.com
image.emails.ryobitools.eu
image.facturation-ggeedu.fr
image.info.charlotte-fresenius-uni.at
image.info.lma.ac.uk
image.info.netto.fr
image.info.nexusenergia.com
image.insights.invance.co
image.link.factor75.eu
image.mail.boulanger.cewe.photo
image.mail.budni.cewe.de
image.mail.cewe.es
image.mail.fnacfoto.cewe.es
image.mail.fotopick.cewe.ch
image.mail.intermarche.cewe.photo
image.mail.kaufland-foto.cewe.de
image.mail.leclerc.servicephotoonline.fr
image.mail.milwaukeetool.eu
image.mail.nutricia.es
image.mail.paradigm.brussels
image.mail.rossmann.cewe.de
image.mail.sfumatureitalia.it
image.mail.stellantis-finance.at
image.mail.stellantis-finance.de
image.mail.stellantis-finance.it
image.mail.uphotos.servicephotoonline.fr
image.mail.weltbild.cewe.ch
image.mail-baistrocchi.eurocaritalia.it
image.mail-dorigoni.eurocaritalia.it
image.mail-eurocarfvg.eurocaritalia.it
image.mail-firenze.eurocaritalia.it
image.mailing.cupra.de
image.mailing.seat.de
image.mailings.alaskamilk.com
image.mail-rinaldi.eurocaritalia.it
image.mail-saottini.eurocaritalia.it
image.marketing.generalivitality.cz
image.marketing.welion.it
image.marketingiberdrola.com
image.mc.gohearing.com
image.mc.hearinghub-usa.com
image.mc.lexiehearing.com
image.mc.technischefachmedien.de
image.mc.vanquisloans.com
image.megadentist.qunosuite.com
image.my.arclinea.net
image.news.coopfinanceplus.ch
image.news.yves-rocher.at
image.news.yves-rocher.ch
image.news.yves-rocher.se
image.newsletter.laskasas.com
image.news-ocasionplus.com
image.official.johnniewalker.com
image.oficial.fcandorra.com
image.ofiziala.realsociedad.eus
image.partners.santanderconsumer.no
image.pt.zurich.com
image.r1-20230525-1.s50.sfmc-tlsprovisioning.com
image.see.allerganaesthetics.com
image.sf.email.ubb.bg
image.update.monument.co
image.ago-anz.basf.com
image.alexandria.gruposantander.com
image.bnl.nestlehealthscience.com
image.ch.hcp.incyte.com
image.communication.audi.co.uk
image.communication.cupra.co.uk
image.communication.generalivitality.pl
image.communication.seat.co.uk

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-17-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAElycsZkn8+enArP2i9SXA+BTygYAm
PMVHQIDaHEael40J7O3rQwJ1ekx51Sw5XCBPlBxOw+nIUXdIe7kyL3eXXA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15669974095667758838641535367607311984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-17-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000497272c6649fcf9e9c0acfda2f525c0f814f28180263cc5474080da1c469e978d09ecedeb4302757a4c79d52c395c204f941c4ec3e9c85177487bb9322f77975c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88604c34e2ece6a8221f1ff5a9f168aaa42100b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-17-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.skoda.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.volkswagen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.volkswagen-vans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.rsi.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.aq-acentor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.diariotodoalicante.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.de.abbviecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dialogue.santanderconsumer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.wallbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.zyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.ca-autobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.drivalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.infucare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ethara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.four-paws.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.four-paws.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.four-paws.org.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fourpawsusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kozminski.edu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nutritionalacademy.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rbinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-mail.touchdownfrankfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vaillant.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vesteralens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.ryobitools.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.facturation-ggeedu.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.charlotte-fresenius-uni.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.lma.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.netto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.nexusenergia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insights.invance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.factor75.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.boulanger.cewe.photo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.budni.cewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cewe.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fnacfoto.cewe.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fotopick.cewe.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.intermarche.cewe.photo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kaufland-foto.cewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.leclerc.servicephotoonline.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.milwaukeetool.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nutricia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.paradigm.brussels'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rossmann.cewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.sfumatureitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stellantis-finance.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stellantis-finance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stellantis-finance.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.uphotos.servicephotoonline.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.weltbild.cewe.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-baistrocchi.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-dorigoni.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-eurocarfvg.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-firenze.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.cupra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.seat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailings.alaskamilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-rinaldi.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-saottini.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.generalivitality.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.welion.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingiberdrola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.gohearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.hearinghub-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.lexiehearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.technischefachmedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.vanquisloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.megadentist.qunosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.arclinea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.coopfinanceplus.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.laskasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news-ocasionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.official.johnniewalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.oficial.fcandorra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ofiziala.realsociedad.eus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.partners.santanderconsumer.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pt.zurich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r1-20230525-1.s50.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.see.allerganaesthetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.email.ubb.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.update.monument.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ago-anz.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.alexandria.gruposantander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bnl.nestlehealthscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ch.hcp.incyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.audi.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.cupra.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.generalivitality.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.seat.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d76d2c2cb00000403004730450221009732f5bb310c343bfcbad7b8287bc0d7c776271689747958ddddf5f70214057002206fb4626385f2c2afebf7d0fe67ee5fdf4b6b0929e9b10813cdfa347c7cba6f4f0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d76d2c28c0000040300473045022042b2a849bebb1a613490f6a68110382825ef210fe1f4f8089054f8cc36758e1e022100ecfdb490d03428799757ec8e51eb6dd1933576069a0e01119c74882b68321589007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d76d2c2b5000004030046304402204f12c105dabe824ee48dd172659fd578e4d45e688ac53404360d44f30985bbb7022059db59af0c0288e7456e4eb8ef650cb482636ba00ecba62a41903a29efc37953
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3245444701919792805147498439544914827722511309660570266971215023514773848299637660588574449170983177220039608661960
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20152276858587673632195331549786632831880459074706378613876137253426907940330329525317676704058460940445866975681511