Carlsonmarketing.com

- CMW -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number df:0b:a5:fd:8c:3e:bc:a8:a8:1d:c3:fb:c5:a9:0c:c7 was issued on by The USERTRUST Network.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

CMW

Organization: CMW
Organization unit: CMW
Organization unit: Hosted by Carlson Marketing Worldwide, Inc
Organization unit: Comodo Unified Communications
Address: 1405 Xenium Lane North
Postal code: 55441
State / Province: MN
Locality: Minneapolis
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): df:0b:a5:fd:8c:3e:bc:a8:a8:1d:c3:fb:c5:a9:0c:c7
Serial Number (int): 296478325011193587087830426930842766535
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 15:92:4b:96:c3:4f:91:94:ed:57:38:a4:6e:fe:e1:80:12:f3:1b:26
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 01:3c:01:8e:f7:e7:e6:da:32:f3:c9:f3:c2:01:d9:da:1d:95:24:2d
Fingerprint (sha256): 75:b8:56:4b:91:84:36:56:89:0c:b9:a4:6e:75:03:ee:79:37:39:06:af:ac:6b:55:aa:77:6a:60:5e:29:58:b9

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate Carlsonmarketing.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Carlsonmarketing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Carlsonmarketing.com
2010allin.com
PultePartners.com
ace.pfizer.com
airperks.com
careconnectionrewards.com
deltaamexcard.com
deltacmw.carlsonmarketing.com
deltacreditcardcash.com
ed.groupeaeroplan.com
essentialrewards.com
grangebucks.com
int-agent.com
irecognize.sprint.com
longaberger.carlsonmarketing.com
my-anniversary-gift.com
saabprograms.com
saabreg.com
thehartfordmiles.com
umatter.carlsonmarketing.com
www.2010allin.com
www.PultePartners.com
www.ace.pfizer.com
www.airperks.com
www.careconnectionrewards.com
www.deltaamexcard.com
www.deltacmw.carlsonmarketing.com
www.deltacreditcardcash.com
www.ed.groupeaeroplan.com
www.essentialrewards.com
www.grangebucks.com
www.int-agent.com
www.irecognize.sprint.com
www.longaberger.carlsonmarketing.com
www.my-anniversary-gift.com
www.saabprograms.com
www.saabreg.com
www.thehartfordmiles.com
www.umatter.carlsonmarketing.com

Other certificates including the domain name Carlsonmarketing.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for Carlsonmarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNApO0fXOne/viv4o6SG
yHcioq/aekhQMj18BnjCzHPPQg74ZH4O7LwTVPHEC5I9ogMg7lngK2SCjhh+p6j4
4itlzY4uk+LPMfHFp+UaVVGVBLsHvYzNDqR78rIqXjxMpBhPfn+qkjByigw4s1vk
jBtvwQmOBWy9wkzPpbb8KEQdhCB0qwQIF3WNJq1C6Ag9QfEBGQM2q+nlQ4v3azd9
6ZztGMPx2Vh8Zu3KujavwlONxx6HZUugXp5lC1GHU5GIkHf3hgEi+qttW1wgPARP
VytJBMyGLCnC2fODfs65vin+rOSNffmbaxwVxE6GTMM97ghwWr5NjMdxFiMYN5nL
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296478325011193587087830426930842766535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55441'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1405 Xenium Lane North'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Carlson Marketing Worldwide, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlsonmarketing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18280963959938238239485645849817456006232724489862603504832740810271716460433165171756271630280784513039114660781336251937571529460134762303042250175462991448475928780820017658736354111758352781142704376953198214818993159602605563237714880002736853232335089694922010373737477660043951046169799559157722190553720435187462199470481820511459609226246147267625160011535389358911164462419666359173201642065909394621265729832509509724439938843656015701660977251098714494021851121051154272317588949680716702950251741414149839975276780800458732740225888671438186041649188996117286824396962907224955576816984990121703293701037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15924b96c34f9194ed5738a46efee18012f31b26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2010allin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PultePartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careconnectionrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltaamexcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltacmw.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltacreditcardcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ed.groupeaeroplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grangebucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-agent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irecognize.sprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longaberger.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-anniversary-gift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saabprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saabreg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehartfordmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umatter.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.2010allin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PultePartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ace.pfizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careconnectionrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltaamexcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltacmw.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deltacreditcardcash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ed.groupeaeroplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essentialrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grangebucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int-agent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irecognize.sprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longaberger.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-anniversary-gift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saabprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saabreg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehartfordmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umatter.carlsonmarketing.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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