san-4-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:8a:fc:31:d6:0e:2b:1b:df:60:34:68:70:11:8b:51 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:8a:fc:31:d6:0e:2b:1b:df:60:34:68:70:11:8b:51
Serial Number (int): 15343160035758884873737688539328514897
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9b:02:c6:3c:5e:e1:96:e1:47:47:d7:e9:6e:bc:3b:17:cb:3f:32:5e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e8:fc:41:00:f8:67:12:98:0c:2c:f5:e0:8b:81:1c:f5:be:bb:df:8b
Fingerprint (sha256): 81:59:73:bd:ac:c7:1a:8b:9b:fb:08:9b:03:09:31:23:d2:5a:02:c9:0c:fa:c0:ce:48:98:51:27:33:5c:6e:07

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-4-s12.tlsprovisioning.exacttarget.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-4-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-4-s12.tlsprovisioning.exacttarget.com
image.afyaeducacional.com.br
image.alliancecutx.net
image.c.gladd.jp
image.realestatenewshub.com
image.relief.zerigohealth.com
image.roubaixe.net
image.salesforce.woz-u.com
image.sf.robinsonsland.com
image.sf.tyreline.co.nz
image.updates.tuckercarlson.com
image.contact.dulyhealthandcare.com
image.contato.bluefit.com.br
image.crest.mx
image.dgdg.com
image.e.davidstea.com
image.e.eversurance.com
image.e.novidadeshinode.com.br
image.e.prodoctor.net
image.e.saints.com.au
image.e.teakdecking.com
image.e.y12fcu.org
image.eliteresearchvaccinerecruitment.com
image.email.5wordsmedia.com
image.email.akrikks.com
image.email.bimbocanada.com
image.email.cavs.com
image.email.clevelandmonsters.com
image.email.empowerfcu.com
image.email.granado.com.br
image.email.machines.com.my
image.email.nesglobal.net
image.email.neuralacemedical.com
image.email.rocketmortgagefieldhouse.com
image.email.rondesantis.com
image.email.sim.edu.sg
image.email.thinkmarkets.com
image.email.totallypromotional.com
image.email.tricard.cl
image.email.withmebyjanssen.com
image.email.workit.health
image.email2.byteme.com
image.emails.amegybank.com
image.emails.calbt.com
image.emails.connect4learning.com
image.emails.extendednotes.com
image.emails.gryphonhouse.com
image.emails.kaplanco.com
image.emails.nbarizona.com
image.emails.nsbank.com
image.emails.pajamagram.com
image.emails.pajamajeans.com
image.emails.vectrabank.com
image.emails.vermontteddybear.com
image.emails.zionsbank.com
image.estrategica.agency
image.experience.thewinecommunity.com
image.hello.runiondentalgroup.com
image.hello.wondrhealth.com
image.hotelcoralpromotions.com
image.info.advisys.com
image.info.macronmusic.com.au
image.info.rehrig.com
image.insta360-news.com
image.jencapcommunications.com
image.joy.pml-bmw.com.sg
image.lexuscrm.mx
image.ma.imagine-gc.com
image.mail.boombet.com.au
image.mail.buckheadrestaurants.com
image.mail.clubcarwash.com
image.mail.eziadvicesolutions.com
image.mail.firefoxbikes.com
image.mail.herocycles.com
image.mail.herolectro.com
image.mail.lander.com
image.mail.magnetsusa.com
image.mail.tokyodisneyresort.jp
image.mail.whitefoxboutique.com
image.marketing.cleanaway.com.au
image.marketing.crossbreedholsters.com
image.marketing.eese.com
image.marketing.minicoinsurance.com
image.marketing.n8tactical.com
image.marketing.uniteddebtassist.com.au
image.marketing2.alliancehcm.com
image.mc.hebel-haus.com
image.member.fairwinds.org
image.mercadeo.haceb.com
image.mkt.visual.com.mx
image.na.sobi.com
image.news.borgwarner.com
image.news.egroup.net.br
image.pr.fithouse.co.jp
image.promotions.harnoisenergies.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-4-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvMwpVUNIgauu1Ty3HCO
OEwIJQcvRkWIXKJWzF1NIFt//PqcQenpE2h3PedRaTVqbkQP+/uKIBRfdzSs3gHS
dxJ4BQNJk925/IX7kR+BwG6jOCgz5gMtDzyODcgzuKtmazcMBpg61qpN8omTxz2t
g8hd/5RMAPBzxdp9edAMhoAS5EuHviRkpo4VuQdl8X/N8e3dl4DPqZCFIP3eYuOp
HdLMTS5uhayfK656pqs24yCHR5TQ3EiCL4kyH8XpTfx4mN3xG2BpIQRMHyboyjVb
6+nKpKxFqcBWqrPQpQzJTs4+QRkydDPTjsUIL/j8OOlIGYjgyMZHo/2eY/If9waj
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15343160035758884873737688539328514897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-4-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22590339753720534557884267558058476596581023423082358322011863200767659143612943033108229376031861963440870095039469187897651773441181266040506180652354594869944821801278171623731880202340932461196556685459338642298486561516592820276248420078967491605321354273781669689554145200317041915699610664653604610191193353016717888454565915782491123443445974414850638369385761944083555819435832455106779011660885427937750858760027868367038851807106556478822051908924612271694055029613525708730935830533631131922663708361511449948226483866456893051922818184825038791054318370541581574149214214567369089104698880006706927412083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b02c63c5ee196e14747d7e96ebc3b17cb3f325e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-4-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.afyaeducacional.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.alliancecutx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.gladd.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.realestatenewshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relief.zerigohealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.roubaixe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.salesforce.woz-u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.robinsonsland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.tyreline.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.tuckercarlson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.dulyhealthandcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contato.bluefit.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crest.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dgdg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.davidstea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.eversurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.novidadeshinode.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.prodoctor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.saints.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.teakdecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.y12fcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eliteresearchvaccinerecruitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.5wordsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.akrikks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bimbocanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cavs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.clevelandmonsters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.empowerfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.granado.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.machines.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nesglobal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.neuralacemedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rocketmortgagefieldhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rondesantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.sim.edu.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.thinkmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.totallypromotional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tricard.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.withmebyjanssen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.workit.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email2.byteme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.amegybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.calbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.connect4learning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.extendednotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.gryphonhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.kaplanco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.nbarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.nsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pajamagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pajamajeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.vectrabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.vermontteddybear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.zionsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.estrategica.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.thewinecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.runiondentalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.wondrhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hotelcoralpromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.advisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.macronmusic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rehrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insta360-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jencapcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.joy.pml-bmw.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lexuscrm.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.imagine-gc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.boombet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.buckheadrestaurants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.clubcarwash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.eziadvicesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.firefoxbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.herocycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.herolectro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.magnetsusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.tokyodisneyresort.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.whitefoxboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.cleanaway.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.crossbreedholsters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.eese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.minicoinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.n8tactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.uniteddebtassist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing2.alliancehcm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.hebel-haus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.member.fairwinds.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mercadeo.haceb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.visual.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.na.sobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.borgwarner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.egroup.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pr.fithouse.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.promotions.harnoisenergies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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