san-1-s4.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:dc:24:0c:36:6c:47:00:04:84:77:75:62:8a:50:8b was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:dc:24:0c:36:6c:47:00:04:84:77:75:62:8a:50:8b
Serial Number (int): 5130720430559181135512257422785400971
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 46:9d:97:44:78:95:b6:f5:bc:db:70:e1:f0:49:36:7b:67:ad:b8:3c
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 1f:5a:0d:a5:ef:61:1a:b0:9f:96:f4:fa:42:3c:2f:4b:f3:b1:5d:92
Fingerprint (sha256): 74:ec:69:a2:f0:14:5a:39:1a:e5:27:76:41:c2:cd:b1:fd:03:e4:d4:1c:75:c2:27:66:ce:d0:5f:3f:e0:be:66

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-1-s4.tlsprovisioning.exacttarget.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-1-s4.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-1-s4.tlsprovisioning.exacttarget.com
image.twhcp.abbott.com
image.uk.nutrition.abbott.com
image.unisuperemail.com.au
image.vnhcp.abbott.com
image.wawa-email.com
image-card.capitalone.com
image.clients.ticketmaster.com
image.communications.institutional.fidelity.com
image.direct.charterhall.com.au
image.e.cinchhomeservices.com
image.e.codesports.com.au
image.e.coxautomotivemobility.com
image.e.erm.com
image.e.kathmandu.co.nz
image.e.kathmandu.com.au
image.e.racenet.com.au
image.e.ripcurl.com
image.e.skynews.com.au
image.e.theaustralian.com.au
image.e.thetelegraph.com.au
image.em.insightvacations.com
image.em.trafalgar.com
image.email.acuralink.acura.com
image.email.aflac-onlineservices.com
image.email.betsafe.com
image.email.claytonhomes.com
image.email.destinycard.com
image.email.fisherpaykel.com
image.email.freestylelibre.co.cr
image.email.haier.co.nz
image.email.healthy-paws.com
image.email.onpeak.com
image.email.trustage.com
image.email1.betway.ca
image.email1.betway.com.ar
image.email1.betway.nl
image.emailimages1.com
image.emailinfo.hp.com
image.emails.laura.ca
image.emails.melanielyne.com
image.emarketing.mgiemailsolutions.com
image.em-brendanvacations.com
image.es.abbottnutrition.com
image.es.nutrition.abbott.com
image.hhtbrands.com
image.idhcp.abbott.com
image.info.awb.com.au
image.info.hult.edu
image.info.ingramcontent.com
image.info.provimi.com
image.info.shoestock.com.br
image.info.zattini.com.br
image.klm-mail.com
image.mail.gulfstatestoyota.com
image.mailing.livenation.com
image.mailing.ticketmaster.com
image.mailmkt.netshoes.com.br
image.mc.ohionational.com
image.medicinerussia.abbott.com
image.medicinesaudi.abbott.com
image.message.americanexpress.com.bh
image.messages.centraldispatch.com
image.messages.dickinsonfleet.com
image.messages.readylogistics.com
image.myhcp.abbott.com
image.news.balticsbetsafe.com
image.news.starcasino.it
image.newsletter.iberostar.com
image.nordicbetmail.nordicbet.com
image.nothingbundtcakes-email.com
image.phhcp.abbott.com
image.professionals.abbottnutrition.com
image.r20220201.s4.sfmc-tlsprovisioning.com
image.secure.credencewell-being.com
image.sfsi-email.com
image.thhcp.abbott.com
image.tr.nutrition.abbott.com
image.tw.abbottnutrition.com
image.twc-email.org

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-1-s4.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMlz7MbZk8s3mhUUcRhR
86suk4JSLEDkTFIt4ds/6SiStwHUoDINlupTEauk0bZIfPvfNzJSGif3w+S0usI9
Yaai2y3V+FQN6lqM6aNRMWpCJLZqWWIiuD/ydbX13ubATPFUo7BeLSOCvwJHykTe
yVkvGxvOTaBQMeLMqNd3wJ68zrV6U1CpmqzZKEfP9NvBrTk2i7ohJyufszUVAlJ/
zwsZt5dhXXvggf5wR8R0vCcmfTRc8amuudKQzbWJLRWzcgHht5s1eUEjqAA/4NUY
4vxBAVpwACvMEaFUpmcu+jWaK/qyTrib2qf4tYWOt9v/uyTkaObn8tfDldkOQNZR
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5130720430559181135512257422785400971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-1-s4.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21307375328053576421006006554077599133727608180990645289272062605686776793602528754606109125839819773516152233507179665601888910188285987206758559617184327746307047620196968023551018265558303234255445667335111499487771428476310712869864532399029386702691886598216752741844005516909049514878564492103354270551185154902864247685586608771705456195247229188672232283420409765905347482284143439937919875055773192806141214084933245941286882238791138552251987040179282476546315076039305095847020505351756251574465215083195095190267173881299277275345181775086012509928684982001645857751622777668653767217861185276300974510439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							469d97447895b6f5bcdb70e1f049367b67adb83c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-1-s4.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twhcp.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.uk.nutrition.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.unisuperemail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vnhcp.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wawa-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image-card.capitalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clients.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.institutional.fidelity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.direct.charterhall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.cinchhomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.codesports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.coxautomotivemobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.erm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.kathmandu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.kathmandu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.racenet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.ripcurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.skynews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.theaustralian.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.thetelegraph.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.insightvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.trafalgar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.acuralink.acura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.aflac-onlineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.betsafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.claytonhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.destinycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fisherpaykel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.freestylelibre.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.haier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.healthy-paws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.onpeak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.trustage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email1.betway.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email1.betway.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email1.betway.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailimages1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailinfo.hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.laura.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.melanielyne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emarketing.mgiemailsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em-brendanvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.es.abbottnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.es.nutrition.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hhtbrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.idhcp.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.awb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.hult.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.ingramcontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.provimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.shoestock.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.zattini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.klm-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.gulfstatestoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.livenation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailmkt.netshoes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.ohionational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicinerussia.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicinesaudi.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.message.americanexpress.com.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messages.centraldispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messages.dickinsonfleet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messages.readylogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.myhcp.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.balticsbetsafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.starcasino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.iberostar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nordicbetmail.nordicbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nothingbundtcakes-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.phhcp.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.professionals.abbottnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.r20220201.s4.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.secure.credencewell-being.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfsi-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.thhcp.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tr.nutrition.abbott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tw.abbottnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twc-email.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0054fcf4acba930422e6924b824e64511d45c6b3f227cca5e2e6a01de228ec0b1f43bffff0845d9a72bf721d6430960809b79a4f6301e7d5fa4410aea3a1fa20db519619b219f821803c5531d82b3f909c424e093a924446868f157314f22ce3b7cc7c12e6362722165f6651bbb5635518fd4e137b4ef09d8e73a46d5a1a1bf634681b000b187c8cc4eb944c885204a24a0238205f286d5c3e7b0f851dd0a61d5dc29b76c9a9442e821d6b253d39e3d5e367f71fd4fbbe97db42d975cea5118de10a7b58e07a77cfea7e92c4f243430ea6a2c567cc2361653cdd1c27cd60f2327aa06f4f40890e5603458cf4823871b4d7cfaf82c03de9960bf8a2b9a0eb96e3f4