san-41-s12.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:28:14:77:04:27:01:90:73:1e:ee:8c:c3:e7:5b:93 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:28:14:77:04:27:01:90:73:1e:ee:8c:c3:e7:5b:93
Serial Number (int): 18817298892958723089902481422395333523
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b4:e8:42:c2:2f:51:a8:70:20:7d:52:f2:6d:d0:f0:14:3d:54:b7:f7
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 67:0e:5c:70:82:55:43:40:c2:c6:bb:e8:b0:a8:bb:9d:60:48:a2:50
Fingerprint (sha256): 80:b6:ad:95:9d:11:c2:f5:e2:98:8f:49:c8:14:f4:b3:3b:b5:10:b3:aa:c8:ab:bc:fd:fc:82:be:09:5a:a3:d6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-41-s12.tlsprovisioning.exacttarget.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-41-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-41-s12.tlsprovisioning.exacttarget.com
image.broadcast.fordham.edu
image.email-ride.shimano.com
image.communications.greathearingbenefits.com
image.agentsuite.integrity.com
image.fastlane-emails.paypal.com
image.mkt.usgaexperiences.com
image.send.tarleton.edu
image.h.usma.dsicustomerservice.com
image.fans.gobblestop.com
image.your.baystatehealth.org
image.sales.phxrisingfc.com
image.info.mynextlight.com
image.info.smallbusinessloans.com
image.info.bralyx.com
image.srm.musashino-u.ac.jp
image.thermomix.co.nz
image.thermomix.com.au
image.email.asharex.com
image.mail.margaritaville.com
image.email.georgiansfirstinc.com
image.mail.harrysstores.com
image.enews.samsonite.com.hk
image.mail.rmhc.org
image.mail.parentingplace.nz
image.communications.arfb.com
image.e.redsparkstrategy.com
image.e.calvin.edu
image.mkt.telepremiosemail.com.br
image.crm.randonseguros.com.br
image.bernafonusa.com
image.email.schmittforsenate.com
image.info.pixiv.net
image.email.tidesmedical.com
image.msg.ford.ca
image.furukawalatam.com
image.email.judgejoeforcongress.com
image.mail.lgonline.cl
image.email.epiqlifestyle.com
image.email.principia.net
image.partner-email.klaviyo.com
image.info.rmaliivf.com
image.marketing.lafaetelocacao.com.br
image.notices.cvs.com
image.email.byte.com
image.cs.pldthome.com
image.e.au.tommy.com
image.e.calvinklein.com.au
image.e.nancyganz.com.au
image.e.vanheusen.com.au
image.email.electmikegarcia.com
image.email1.incomelaboratory.com
image.your.agtrustaca.com
image.email.cbs.sa.gov.au
image.e.westjetvacations.com
image.mail.ontheflystores.com
image.advance.uwm.edu
image.e.etrac.org.au
image.em.nf1pn.com
image.email.arcutis-canada.ca
image.hcp.nf1pn.com
image.marketing.buildex.com.pe
image.email.epicprovisions.com
image.mail.augustapreciousmetals.com
image.email.eero.com
image.leadcenter.integrity.com
image.mail.oona.com
image.mail.stackteamapp.com
image.info.moneyjet.com
image.mercadeo.redmotorscr.com
image.fordcredithub.com
image.email.aryval.io
image.vigoritobr.com
image.ma.exiletribestation.jp
image.e.alibey.com
image.msg.lincolncanada.com
image.re.terminix.com
image.emails.ingredient.mn
image.e2.llbeanbusiness.com
image.email.eucharist.us
image.college.citizensbank.com
image.email.hamiltonarenaproject.com
image.learn.darden.virginia.edu
image.rewards.lukoilusa.com
image.emails.zionsbancorp.com
image.email.brunswickcu.com
image.email.covis-canada.ca
image.email.ronjohnsonforsenate.com
image.i.online.keypathalpha.com
image.info.dayonebio.com
image.nissan.carrera.com.br
image.signature.carrera.com.br
image.volkswagen.carrera.com.br
image.em.sonicautomotive.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-41-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnqiamGamzp148Zh33e2
UYK4EfM2jOTVZTeaP0NJAcIWY0H0cvGdCaDz6GcOay2bam1H1CtjwvcDne+fYwzJ
wnYbb4qIyob3zOkwL72CZbQOLXTRV986zkflJG5kq6zAGRTXSNyxqw4vSqk8xSd+
x9/QBQwzMeLK8bGGsLTbRGMstCzwGCVNHostuNhrBCtKQSZjgJ+IFjeo8yqN1pz2
zgM/K6Fd1YVrJkedT7JDIc7w7EHDT1StE6WGdl4qr2YGlCjOLfhHAubRzV9XqSQd
jzW9xHgcFzbUG70RTMz/gujssmbTAWy8xEWvYF/00v3UUxHyesZy9CuF0dPrQW2M
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18817298892958723089902481422395333523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-41-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16976406159590367782557454897365238303540488420682314838371981630024205194161815210598451328300245187247221617007764241360624949660513382473957527735764185519604125433233660977729583244128837813227094891746873762032144028028600993960724239607098025744544841829203592444366377088398086684468043598258341224990944506707913179669512226224994412430980329814440171572320878748526272147180443482161401814167409619997979115300461224321321835479983199936883110481837422575185761942349248940387993047101182218634910588787966171264180179444029702817836106158237530872154669578243882809769478048165670431596169809520877487623203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4e842c22f51a870207d52f26dd0f0143d54b7f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2710 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-41-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.broadcast.fordham.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-ride.shimano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.greathearingbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.agentsuite.integrity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fastlane-emails.paypal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.usgaexperiences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.send.tarleton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.h.usma.dsicustomerservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fans.gobblestop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.baystatehealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.phxrisingfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mynextlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.smallbusinessloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bralyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.srm.musashino-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.thermomix.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.thermomix.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.asharex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.margaritaville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.georgiansfirstinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.harrysstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enews.samsonite.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rmhc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.parentingplace.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.arfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.redsparkstrategy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.calvin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.telepremiosemail.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.randonseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bernafonusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.schmittforsenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.pixiv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tidesmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msg.ford.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.furukawalatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.judgejoeforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lgonline.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.epiqlifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.principia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.partner-email.klaviyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rmaliivf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.lafaetelocacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notices.cvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.byte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cs.pldthome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.au.tommy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.calvinklein.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.nancyganz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vanheusen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.electmikegarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email1.incomelaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.agtrustaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cbs.sa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.westjetvacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ontheflystores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advance.uwm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.etrac.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.nf1pn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.arcutis-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hcp.nf1pn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.buildex.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.epicprovisions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.augustapreciousmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.leadcenter.integrity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.oona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.stackteamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.moneyjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mercadeo.redmotorscr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.fordcredithub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.aryval.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vigoritobr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.exiletribestation.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.alibey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msg.lincolncanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.re.terminix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.ingredient.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e2.llbeanbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eucharist.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.college.citizensbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.hamiltonarenaproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.learn.darden.virginia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rewards.lukoilusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.zionsbancorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.brunswickcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.covis-canada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ronjohnsonforsenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.online.keypathalpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.dayonebio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nissan.carrera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.signature.carrera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.volkswagen.carrera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.sonicautomotive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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