secure-usea2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:9c:40:18:3d:07:e8:3e:ec:29:0d:99:4b:5c:ed:c3 was issued on by DigiCert Inc.

With 119 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:9c:40:18:3d:07:e8:3e:ec:29:0d:99:4b:5c:ed:c3
Serial Number (int): 19420490245498934209533948683578305987
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:7f:0b:88:71:33:9f:ce:4d:90:35:04:ff:ea:41:08:b7:e1:9b:1d
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 97:a4:c0:36:d3:9c:57:cd:a5:a5:0c:48:d6:3f:28:bd:81:f9:aa:cb
Fingerprint (sha256): 7b:62:5a:44:4b:55:4e:bb:c4:5e:bf:e9:84:79:d2:55:dc:b3:02:64:7f:ee:1a:f3:e9:d2:47:e3:2b:08:57:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate secure-usea2-1.tessituranetwork.com

119

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-usea2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-usea2-1.tessituranetwork.com
*.tn.services
*.tnhs.cloud
t-secure-usea2-1.tessituranetwork.com
cst1.tessituranetwork.com
my.hubbardstreetdance.com
shop.slso.org
tickets.nashvillesymphony.org
cart.tpac.org
tickets.grandtheater.org
my.alysstephens.org
tickets.asf.net
cart.mnhs.org
my.austinopera.org
my.mnzoo.org
my.tulsabotanic.org
secure.countrymusichalloffame.org
tickets.thegilmore.org
my.desmoinesperformingarts.org
my.austinsymphony.org
my.balletaustin.org
my.wittemuseum.org
secure.walkerart.org
tickets.austintheatre.org
my.tulsaballet.org
my.grantparkmusicfestival.com
tickets.liedcenter.org
my.tulsasymphony.org
my.harristheaterchicago.org
ticketing.kcballet.org
my.childrenstheatre.org
orders.cocastl.org
access.fwsymphony.org
ticketing.kcrep.org
tickets.kauffmancenter.org
ticketing.wilson-center.com
experience.mcachicago.org
tickets.waltonartscenter.org
tickets.dct.org
my.dallaszoo.com
securesite.guthrietheater.org
cart.houstonsymphony.org
cart.nelson-atkins.org
my.thecarsoncenter.org
ticketing.graceland.com
tickets.overture.org
buy.amptickets.com
ticketing.opera-stl.org
tickets.kcopera.org
tickets.texasballettheater.org
tickets.kcsymphony.org
tickets.zachtheatre.org
buy.rwb.org
tickets.kcstarlight.com
My.TheSKyPAC.com
my.stagestheatre.org
my.writerstheatre.org
my.philbrook.org
my.mnopera.org
my.tuts.com
buy.fwmuseum.org
cart.broadwaytheatrecenter.com
my.theworldwar.org
my.thehermitage.com
my.hnoc.org
billetterie.droitsdelapersonne.ca
ticketing.humanrights.ca
my.oxfordpac.org
my.thehobbycenter.org
my.desmoinesartcenter.org
my.dallastheatercenter.org
members.kera.org
my.thinkeryaustin.org
tickets.wrightwood659.org
secure.kimbellart.org
tix.theatre2.org
my.gilcrease.org
my.wso.ca
cart.ticketomaha.com
my.jazzstl.org
order.cso.org
tickets.crystalbridges-themomentary.org
my.mfah.org
tickets.milwaukeerep.com
tickets.royalmtc.ca
my.thelongcenter.org
tickets.hjseries.org
secure.hbg.org
secure.dallasopera.org
secure.dallassymphony.org
secure.firststage.org
my.smm.org
my.oklahomacontemporary.org
ticket.artsiowa.com
my.noma.org
cart.joffrey.org
secure.tulsapac.com
my.arkmfa.org
tickets.winnipegfringe.com
my.goodmantheatre.org
secure.missouribotanicalgarden.org
mytickets.auditoriumtheatre.org
cart.alleytheatre.org
secure.athenaeumcenter.org
pacetickets.tulsacc.edu
secure.americansongarchives.org
my.amazeum.org
my.luminaryartscenter.com
my.milwaukeeballet.org
secure.casamanana.org
cart.steppenwolf.org
my.pritzkermilitary.org
my.hmns.org
my.houstongrandopera.org
my.music.rice.edu
secure.tulsaopera.com
visit.civilrightsmuseum.org
secure.attpac.org
secure.reddirtrelieffund.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-usea2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCFn9F5wKPekzXpYHmye
cir5IXkYuFVPmd57ACx7eoyIRRD6tzgY4omZGWY7faKQ385/ojG8vKGiS72MEUOz
dXNDECO9nUNlVwV33PzGyY3WpFuv9jNbha8dlbRpcugIxV8QIwBaCkNUxfEzKPCw
yB3P+NXg0kuedqp0Tp8aOlzpZf0Sw9oVnuuh0ZgiCpf39OhG8Apzn3Vr5++hl/X6
ebtTq5fj1zTK4zC6o7DYo0SYHY3DlcH1vVpmtdQuwhrg08uXrrJE5C8ggSMmvKD8
zQgEXq1+grNha+dM9QIygOviN9twRhO5EM90T/z3j7rQplBF2boY7xEJYBWPRZQV
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19420490245498934209533948683578305987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23749274481942996030446237201282378340091388701209683835055876368677961416515345809944070465441298420917242202043796368471005482243234701578485190582838556046355136273565244628052206841275340834197373443552569900479309979697484456036882890787069274940711216890104270276118423663898646678980344360559485448312510019405125421726857013432226848118323592405163902956265469775076970200073245400441313176609474629294858332061453320493095865603497843566794747424453038131980080153312967581255334577937634712803947658294631357366735994990132940456521196055702455329740243072533475652834042472734711001904099762902267218629901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e7f0b8871339fce4d903504ffea4108b7e19b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hubbardstreetdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.slso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nashvillesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.grandtheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.alysstephens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.asf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.mnhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsabotanic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.countrymusichalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegilmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.balletaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wittemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.walkerart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.austintheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsaballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.grantparkmusicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.liedcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.harristheaterchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.childrenstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.cocastl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fwsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kauffmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.wilson-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mcachicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.waltonartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallaszoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.houstonsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.nelson-atkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thecarsoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.graceland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.overture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.amptickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.opera-stl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.texasballettheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.zachtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.rwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'My.TheSKyPAC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stagestheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.writerstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.philbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.fwmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.broadwaytheatrecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theworldwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehermitage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hnoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billetterie.droitsdelapersonne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.humanrights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oxfordpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehobbycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesartcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallastheatercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thinkeryaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wrightwood659.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kimbellart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.theatre2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gilcrease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jazzstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.crystalbridges-themomentary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mfah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.milwaukeerep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.royalmtc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thelongcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hjseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hbg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallassymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.firststage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oklahomacontemporary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.artsiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.noma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.joffrey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tulsapac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.arkmfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.winnipegfringe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.goodmantheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.missouribotanicalgarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytickets.auditoriumtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.alleytheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.athenaeumcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacetickets.tulsacc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.americansongarchives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.amazeum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.luminaryartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.milwaukeeballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.casamanana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.steppenwolf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pritzkermilitary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hmns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.houstongrandopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.music.rice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tulsaopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.civilrightsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.attpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.reddirtrelieffund.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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