san-37-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:9f:1b:d3:25:2f:9d:72:9f:d7:2e:71:14:52:8d:f3 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:9f:1b:d3:25:2f:9d:72:9f:d7:2e:71:14:52:8d:f3
Serial Number (int): 7472279533141714465228078717751954931
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9b:45:f9:18:bb:cd:68:e8:f1:13:ce:e3:6c:d0:18:41:b5:6d:81:aa
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 57:23:af:6f:e8:06:d4:27:35:59:9c:ee:f5:9a:99:9f:26:a0:ef:ba
Fingerprint (sha256): 75:18:4e:aa:61:4d:f5:36:7c:6c:98:d7:2d:b8:32:9d:e3:1d:8a:56:29:ca:4f:2a:c2:66:67:71:49:c3:c3:38

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-37-s12.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-37-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-37-s12.tlsprovisioning.exacttarget.com
image.eliteresortscaribbean.com
image.maine.celticsmail.com
image.stg-solutions.canadapost-postescanada.ca
image.comunicacion.gcdc.com.ar
image.crm.yeahconecta.com.br
image.mc.weisigergroup.com
image.e.vacasa.com
image.mail.bsoul.com
image.mail.calpany.cl
image.mail.keds.cl
image.mail.rkflife.com
image.btgpactual.us
image.mail.entrust97.ca
image.mail.vault.com
image.e.psu.edu
image.mail.burton.cl
image.updates.nikkihaley.com
image.email.integrate2cloud.com
image.cliente.brb.com.br
image.cloud.sendersmailbox.com
image.info.campaignsenders.com
image.info.mailerbarg.com
image.email.spinpremia.com
image.email.risas.com
image.citroenbhfrance.grupojorlan.com.br
image.comms-marathon.com
image.email.smartsti.com
image.marketing.simplyretirement.com
image.mail.columbia.com.uy
image.mail.columbia.pe
image.mail.forusuy.com
image.mail.hushpuppies.com.uy
image.correo.walmart.com.ni
image.em.brightstart.com
image.m.asme.org
image.mail.rkflife.pe
image.marketing.sorellaapothecary.com
image.comunicacionesinfinita.com
image.mail.billabong.pe
image.mail.pasqualini.com.uy
image.email.domschicago.com
image.email.shamrockfsw.com
image.mail.catlifestyle.com.uy
image.mail.merrell.com.uy
image.e.taylormorrison.com
image.enprodetunegocio.spinpro.mx
image.mail.catlifestyle.co
image.mail.hushpuppies.com.co
image.mail.merrellcolombia.com
image.edm.highsierra.com.au
image.edm.samsonite.co.nz
image.email.biberk.com
image.mail.rkflife.com.co
image.wglenergy-email.com
image.info.chojyu.com
image.medicaid.illinois.gov
image.mail.nocuffs.com
image.message.lgfcu.org
image.info.aroa.com
image.comunicacion.openpay.mx
image.email.rocksolidfunding.com
image.mail.galliard.com
image.updates.pollingtogether.com
image.ambasays.com
image.email.meriplex.com
image.marketing.masseguro.pe
image.marketing.petrovina.com.br
image.outreach.partners.playstation.net
image.tripcustomercare.com
image.marketing.segurocajaarequipa.pe
image.correo.ladespensadedonjuan.com.sv
image.correo.launion.com.ni
image.correo.paiz.com.gt
image.correo.paiz.com.hn
image.email.usskiandsnowboard.org
image.engage.stjohns.edu
image.mail.hushpuppies.pe
image.marketing.blinkconecta.com.br
image.otr.otrclutch.com
image.sydneymarkets.net.au
image.action.340b-matters.com
image.contato.klavi.ai
image.divulga.sebraesc.com.br
image.e.highlands.edu
image.e.newworldclub.com.hk
image.gmgupdates.ucb.com
image.hello.zealcare.com
image.mail.keds.pe
image.samsonite.co.jp
image.unitedsocceracademymail.org
image.producer.upmchp.com
image.action.supportbradchambers.com
image.correo.masxmenos.cr
image.g2grewards.com
image.sales.coastalinsurancesolution.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-37-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/iqrzlJ3WtISq8+I0hQ
T2S+zfyMhpysqjvN1rzWUJeeF9d/KkZDkdwZeeMVUUWp67uRcXMEHEc0f9M31nGF
p8te+/Yw1c3CJETpt5coOpOdVsYaBScT+wQ38tqgJSBZJjd8P3va2qHOChJF8HAF
SrTfhc47izeRj0IMaeSV02vlnZAfDg6JN5oDzdgnTZFeHrQC7Ya2JZJUgZlOqVdg
dezUdh7IX5AtdE6+XSGZZOKKzSkemY8HBh8ez3GlTF3QLWTNKbbzH9ZkCmN//8XL
d6BoMTL426H7N4MpCNFL8qGAcJerF/9HIxz3XTjCdHEGlhLPPcazU1Mo3ESyEBSG
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7472279533141714465228078717751954931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-37-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24739091606192669785245425465987603732825693472332456434620070983688662344471244442081916036590100075360425575881025192448190931425155748704239335425033957253322056827299256149488793908502645217210498303958509025419021852889004030029957480581955347929643480840547736545007884000247675974267040942814747923291112790972311469125750288256621524559818607560443926389557435576470656020938362924671536953748583128358322955320686472902334525365845919043590376358673167768251380360684028369487346110992748463745451960892582290037688685588902271116638214532062697319895439779098868231275216031168990091816092288349651137234597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b45f918bbcd68e8f113cee36cd01841b56d81aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-37-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eliteresortscaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maine.celticsmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.stg-solutions.canadapost-postescanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.gcdc.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.yeahconecta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.weisigergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vacasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.calpany.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.keds.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rkflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.btgpactual.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.entrust97.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.burton.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.nikkihaley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.integrate2cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cliente.brb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.sendersmailbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.campaignsenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mailerbarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.spinpremia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.risas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.citroenbhfrance.grupojorlan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms-marathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.smartsti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.simplyretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.columbia.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.columbia.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.forusuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppies.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.walmart.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.brightstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.asme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rkflife.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.sorellaapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacionesinfinita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.billabong.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.pasqualini.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.domschicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shamrockfsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.catlifestyle.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.merrell.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.taylormorrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enprodetunegocio.spinpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.catlifestyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppies.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.merrellcolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.highsierra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.samsonite.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.biberk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rkflife.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wglenergy-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.chojyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicaid.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nocuffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.message.lgfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aroa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.openpay.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rocksolidfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.galliard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.pollingtogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ambasays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.meriplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.masseguro.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.petrovina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.outreach.partners.playstation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tripcustomercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.segurocajaarequipa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.ladespensadedonjuan.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.launion.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.paiz.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.paiz.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.usskiandsnowboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.stjohns.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppies.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.blinkconecta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.otr.otrclutch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sydneymarkets.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.action.340b-matters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contato.klavi.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.divulga.sebraesc.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.highlands.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.newworldclub.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gmgupdates.ucb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.zealcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.keds.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.samsonite.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.unitedsocceracademymail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.producer.upmchp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.action.supportbradchambers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.masxmenos.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.g2grewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.coastalinsurancesolution.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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