san-11-s13.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:db:cc:6e:73:6f:44:64:fa:35:89:9d:1b:ec:73:5e was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:db:cc:6e:73:6f:44:64:fa:35:89:9d:1b:ec:73:5e
Serial Number (int): 13104311336465681495682680007410086750
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:cd:01:7b:48:87:06:6d:59:2a:8e:b2:90:f2:1e:24:6a:da:a7:05
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 71:64:ac:88:cd:a7:8d:d6:b2:0f:4a:42:25:d1:74:17:42:f9:0d:f8
Fingerprint (sha256): 70:ee:c8:75:29:bc:50:c1:5c:1f:ae:eb:71:c3:fe:b2:6b:38:ee:04:89:ce:9d:15:8f:ef:22:cc:61:22:33:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-11-s13.tlsprovisioning.exacttarget.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-11-s13.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-11-s13.tlsprovisioning.exacttarget.com
image.info.southside.edu
image.marketing.safesteptub.com
image.media.rankworks.com
image.advancement.regis.edu
image.ipi.ipirangacomunica.com.br
image.co.email.betway.us
image.e.healthyworldpharmacy.com.au
image.ia.email.betway.us
image.in.email.betway.us
image.clientes.toulon.com.ar
image.connect.singaporetech.edu.sg
image.email.ecobici.mx
image.seekercommunications.wbd.com
image.isncrm.com
image.mail.ymcahbb.ca
image.mc.fsinvestments.com
image.omnorthbaires.com
image.teampape.com
image.marketing.forgehealth.com
image.email.finanzero.com.br
image.em.bloom-luxe.jp
image.nestglobedigi.com
image.contato.clubecasadesign.com.br
image.e.montlick.com
image.info-frisia.coop.br
image.sfma.netsea.jp
image.silanesmarketing.com
image.caoa360.com
image.connect.flame.edu.in
image.e.yonda.com.au
image.info-aforeazteca.com.mx
image.info-segurosazteca.com
image.conteudo.eurochemsam.com
image.ourboatsyourfun.com
image.tablo.outsetmedical.com
image.contatobrasal.com.br
image.sfmc.theyounionlive.in
image.cpt365.org
image.eurocomunica.com.br
image.info.eteros.com
image.mail.mayferjoyas.com
image.rmofertas.com
image.smc.wakudoki.ne.jp
image.comunicaciones.camconnection.com
image.mavsmail.com
image.email.ves.com
image.marketing.avla.com
image.email.carnegiescience.edu
image.engage.visitvictoria.com.au
image.communications.manbafinance.com
image.e.fuse.org
image.e.plus.qvc.com
image.email.spellingbee.com
image.email.picknpull.com
image.news.offerfit.ai
image.tu360comprasbancolombia.com.co
image.marketing.gsquarehousing.com
image.email.fcsamerica.com
image.marketing.allam.com.au
image.mc.citadelsecurities.com
image.mktg.myrealestate.co.in
image.email.agdirect.com
image.email.clearchoicepoolcaretx.com
image.email.frontierfarmcredit.com
image.email.kindercare.com
image.resilmkt.com.br
image.connect.zerotothree.org
image.email.quarkexpeditions.com
image.clientesprocredito.mx
image.em.kitterytradingpost.com
image.mkt.vaportec.com.br
image.mortgage.movement.com
image.tradewindaviation.info
image.email.ecapital.com
image.sms.email.ncdhhs.gov
image.sunteckindia.co
image.support.cpa-jobs.jp
image.akky.com.mx
image.avisos.ado.com.mx
image.email-pepsico.es
image.bicehipotecaria.cl
image.e.thrivent.com
image.email.blueassist.com.au
image.email.wbur.org

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-11-s13.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYTAfYckUDMrdMTpyXRT
0/hiVtyOrPW58xf1/6knKeHDE1brU9Zov2yjO74AKHw0zKWQ0oMdMzKDadsD8Aba
5kAsRYWO5oG8j3NJ4aRVPMDz5TdeuRXmu97l5PzQUv59mkwsExuv8TtjQCke3mGt
782/xmA5TSOg154hxeNMi048jdJYKIh0cJMorSPsDYUrfNBrMmhTqwNmnHy7eCzW
PLpZa1zcTpxt0/xY8RgrFg/t4bunpDItiu3D2BuxCOsVSp2PbXsN4xMsbW7Cg8Q/
5ebaVTbSQqzX5kjRITD3sFK2y/LJKnfkkpgXFiHuaIKd3w4NkmVG8M+HeFa9qEMJ
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13104311336465681495682680007410086750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-11-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19884876288974182413887685990584081872683277459254409774004375937968178103873607704715501061894875235931556303052805041256634835761855936698730442854954355445633935966284834304251038222811120595490640875399628031011074716979432636616294769581103703563588184123829603657551332623965587235399556011149257420736254230933588143315764242189459806669405425889025463765005871657702777102553228107742037276390688550655953636911889964736623668694018856279912633516356514784976285387792646305343369324710398008595388343629548549270435489509210277886928655372115047528405013015229471130402784656424409136683721168309615342061969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09cd017b4887066d592a8eb290f21e246adaa705
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-11-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.southside.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.safesteptub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.media.rankworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advancement.regis.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ipi.ipirangacomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.co.email.betway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.healthyworldpharmacy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ia.email.betway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.in.email.betway.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientes.toulon.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.singaporetech.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ecobici.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.seekercommunications.wbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.isncrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ymcahbb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.fsinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.omnorthbaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.teampape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.forgehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.finanzero.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.bloom-luxe.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nestglobedigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contato.clubecasadesign.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.montlick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-frisia.coop.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfma.netsea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.silanesmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.caoa360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.flame.edu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.yonda.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-aforeazteca.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info-segurosazteca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.eurochemsam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ourboatsyourfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tablo.outsetmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contatobrasal.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.theyounionlive.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cpt365.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eurocomunica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.eteros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mayferjoyas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rmofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smc.wakudoki.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.camconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mavsmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.avla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.carnegiescience.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.visitvictoria.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.manbafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fuse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.plus.qvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.spellingbee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.picknpull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.offerfit.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tu360comprasbancolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.gsquarehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fcsamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.allam.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.citadelsecurities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.myrealestate.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.agdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clearchoicepoolcaretx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.frontierfarmcredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.kindercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.resilmkt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.zerotothree.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.quarkexpeditions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clientesprocredito.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.kitterytradingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.vaportec.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mortgage.movement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tradewindaviation.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ecapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sms.email.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sunteckindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.support.cpa-jobs.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.akky.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.avisos.ado.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-pepsico.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bicehipotecaria.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.thrivent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.blueassist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.wbur.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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