san-37-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:df:88:42:4f:09:e7:78:15:25:2c:1c:91:5e:fd:ef was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:df:88:42:4f:09:e7:78:15:25:2c:1c:91:5e:fd:ef
Serial Number (int): 10465241831173789430166184478619139567
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2d:df:93:76:a8:75:e8:27:f4:14:c8:5e:c4:7d:1e:9d:5b:1c:b8:92
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ee:b5:af:5f:8a:74:f3:02:63:bc:19:37:5e:af:ee:4c:3b:f5:30:6e
Fingerprint (sha256): 8f:cf:9e:10:3f:ca:ce:93:40:d1:b5:d3:f4:a4:cf:a8:8e:65:84:1a:e9:73:88:17:b9:a5:43:fd:3b:4b:23:ab

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-37-s12.tlsprovisioning.exacttarget.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-37-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-37-s12.tlsprovisioning.exacttarget.com
image.eliteresortscaribbean.com
image.maine.celticsmail.com
image.stg-solutions.canadapost-postescanada.ca
image.comunicacion.gcdc.com.ar
image.crm.yeahconecta.com.br
image.mc.weisigergroup.com
image.e.vacasa.com
image.mail.bsoul.com
image.mail.calpany.cl
image.mail.keds.cl
image.mail.rkflife.com
image.btgpactual.us
image.mail.entrust97.ca
image.mail.vault.com
image.e.psu.edu
image.mail.burton.cl
image.updates.nikkihaley.com
image.email.integrate2cloud.com
image.cliente.brb.com.br
image.cloud.sendersmailbox.com
image.info.campaignsenders.com
image.info.mailerbarg.com
image.email.spinpremia.com
image.email.risas.com
image.citroenbhfrance.grupojorlan.com.br
image.comms-marathon.com
image.email.smartsti.com
image.marketing.simplyretirement.com
image.mail.columbia.com.uy
image.mail.columbia.pe
image.mail.forusuy.com
image.mail.hushpuppies.com.uy
image.correo.walmart.com.ni
image.em.brightstart.com
image.m.asme.org
image.mail.rkflife.pe
image.marketing.sorellaapothecary.com
image.comunicacionesinfinita.com
image.mail.billabong.pe
image.mail.pasqualini.com.uy
image.email.domschicago.com
image.email.shamrockfsw.com
image.mail.catlifestyle.com.uy
image.mail.merrell.com.uy
image.e.taylormorrison.com
image.enprodetunegocio.spinpro.mx
image.mail.catlifestyle.co
image.mail.hushpuppies.com.co
image.mail.merrellcolombia.com
image.edm.highsierra.com.au
image.edm.samsonite.co.nz
image.email.biberk.com
image.mail.rkflife.com.co
image.wglenergy-email.com
image.info.chojyu.com
image.medicaid.illinois.gov
image.mail.nocuffs.com
image.message.lgfcu.org
image.info.aroa.com
image.comunicacion.openpay.mx
image.email.rocksolidfunding.com
image.mail.galliard.com
image.updates.pollingtogether.com
image.ambasays.com
image.email.meriplex.com
image.marketing.masseguro.pe
image.marketing.petrovina.com.br
image.outreach.partners.playstation.net
image.tripcustomercare.com
image.marketing.segurocajaarequipa.pe
image.correo.ladespensadedonjuan.com.sv
image.correo.launion.com.ni
image.correo.paiz.com.gt
image.correo.paiz.com.hn
image.email.usskiandsnowboard.org
image.engage.stjohns.edu
image.mail.hushpuppies.pe
image.marketing.blinkconecta.com.br
image.otr.otrclutch.com
image.sydneymarkets.net.au
image.action.340b-matters.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-37-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o7qT2RW0hC5nijrBhHk
7aJem+RsEtxEpQLfd4pMImBE60q7OjHfrfTVi+c27/s/sEaJav/z1HG0CH+W3Amt
1liwvRctB4paajfgr7GpF3b71e5DEu41t4aqGYcov8I/Xh9W271+v3xNyUS62EHt
KbBsfROrtTbxSEvujPq3OxYsv/mzRRFf06ykQPQHlYo/+r7cz23LaUctZp8n75k5
hB132NW5oMlX+X7Gr5vlKez+2Gd/i8aXvLAEt9XSLiIUB7FdeiWi2m/rNKkh6v6q
sMxpAUPO5kv2BR35llDuVEuUV80A1Q7+zqzp/iDR8335C2pey/Eh44xZ53uBxmrh
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10465241831173789430166184478619139567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-37-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27085471410916442967187167074511592131497999208438694858893482203288762307330874285140745856872850685175349914213302634015389146893455055580901840471351884602931907166524374970465752228396502945468022167042253012008434026754122528396645066230052950854241301969213584110369644159725641448483068608428124763598192674945337003167431635744508770891714326570231930750091490720693470311889367930233520261580802868769317993325679511183150898810378378093942876797375761463803123298462176505354872630804831045611108981635065013353675657242658524166295730762304802868144105614121548555975931623783020502881491286324651900985661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ddf9376a875e827f414c85ec47d1e9d5b1cb892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-37-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eliteresortscaribbean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maine.celticsmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.stg-solutions.canadapost-postescanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.gcdc.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.yeahconecta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.weisigergroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.vacasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bsoul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.calpany.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.keds.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rkflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.btgpactual.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.entrust97.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.psu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.burton.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.nikkihaley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.integrate2cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cliente.brb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloud.sendersmailbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.campaignsenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mailerbarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.spinpremia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.risas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.citroenbhfrance.grupojorlan.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms-marathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.smartsti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.simplyretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.columbia.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.columbia.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.forusuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppies.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.walmart.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.brightstart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.asme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rkflife.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.sorellaapothecary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacionesinfinita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.billabong.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.pasqualini.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.domschicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shamrockfsw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.catlifestyle.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.merrell.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.taylormorrison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enprodetunegocio.spinpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.catlifestyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppies.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.merrellcolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.highsierra.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.samsonite.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.biberk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rkflife.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wglenergy-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.chojyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicaid.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nocuffs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.message.lgfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.aroa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.openpay.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rocksolidfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.galliard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.updates.pollingtogether.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ambasays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.meriplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.masseguro.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.petrovina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.outreach.partners.playstation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tripcustomercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.segurocajaarequipa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.ladespensadedonjuan.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.launion.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.paiz.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.correo.paiz.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.usskiandsnowboard.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage.stjohns.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hushpuppies.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.blinkconecta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.otr.otrclutch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sydneymarkets.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.action.340b-matters.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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