san-7-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:3e:ec:f7:51:82:10:1e:95:8a:0d:31:1a:f8:6d:75 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:3e:ec:f7:51:82:10:1e:95:8a:0d:31:1a:f8:6d:75
Serial Number (int): 2985184640047116150408282097654984053
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 51:40:cc:52:53:ad:49:19:ca:ea:fa:c9:52:62:36:61:d5:cf:f4:47
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 09:24:48:2b:e0:49:3c:e7:4e:b3:6f:a9:64:8e:29:30:3b:1a:2d:92
Fingerprint (sha256): 9c:3b:3a:2d:86:af:e6:62:f9:6b:45:f2:dc:58:9c:63:2d:15:d5:2f:e0:dd:25:78:dc:07:1d:fa:f7:8e:a3:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-7-s12.tlsprovisioning.exacttarget.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-7-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-7-s12.tlsprovisioning.exacttarget.com
image.email.christiansaunders.com
image.email.ctsfw.edu
image.email.daylis.in
image.email.lafc.com
image.email.rejectshop.com.au
image.email.shoecarnival.com
image.email.superlife.co.nz
image.email.vimpat.com
image.emails.globalprotection.com
image.emails.myonecondoms.com
image.emails.onecondoms.com
image.go.crowholdings.com
image.go.eagletrading.international
image.go.will-agaclinic.com
image.hello.homedics.com
image.hello.thomaseye.com
image.info.avancecare.com
image.info.consorcio.cl
image.info.fontana.org
image.info.treasurer.ca.gov
image.info.vinuni.edu.vn
image.lassus.pdimcs.net
image.m.redicoppel.com
image.mail.lifestyleproductsgroup.com
image.mail.mascolonia.com
image.mail.rgf-hr.com
image.mail.starvistalive.com
image.mail.taxprotectionplus.com
image.mail.timelife.com
image.marketing.altius360.com
image.marketing.amsunsolar.com
image.marketing.corehome.mx
image.marketing.fiskerinc.com
image.marketing.inter.mx
image.marketing.mercatus.org
image.marketing.worldshopping.global
image.mc.care.org.au
image.mensajeria.itau.cl
image.mkt.renovainvest.com.br
image.news.vinpearl.com
image.portafolioinmobiliariocr.com
image.relacionamento.brqualy.com.br
image.relacionamento.mercedesbenzconsorcio.com.br
image.s.brumbys.com.au
image.s.crust.com.au
image.s.donutking.com.au
image.s.gloriajeanscoffees.com.au
image.s.michels.com.au
image.s.pizzacapers.com.au
image.send.krewards.com
image.service.botejyu.co.jp
image.sf.pursehouserural.com.au
image.travel.margaritavilleresorts.com
image.twicedaily.pdimcs.net
image.vc.marche.com.br
image.your.ujafedny.org
image.ages.bio
image.bedsonmkt.com
image.care.vinmec.com
image.celebrate.korbel.com
image.circlek.pdimcs.net
image.comms.edd.ca.gov
image.comunicacao.kinvo.com.br
image.connect.beckinstitute.org
image.contact.vinfastauto.com
image.contact.vinhomes.vn
image.creditstrong.austincapitalbank.com
image.crm.hypera.com.br
image.devemail.pdisoftware.com
image.digital.coliban.com.au
image.digital.gruposaga.com.br
image.e.caldercasino.com
image.e.derbycitygaming.com
image.e.empowersvc.com
image.e.fairgroundsracecourse.com
image.e.harlowscasino.com
image.e.newportrg.com
image.e.novavax.com
image.e.oakgrovegaming.com
image.e.oceandowns.com
image.e.oxfordcasino.com
image.e.paracogas.com
image.e.presqueisledowns.com
image.e.riverwalkvicksburg.com
image.e.soundseasy.com.au
image.e.turfway.com
image.e.weissratings.com
image.email.aggienetwork.com
image.email.briviact.com
image.email.buenavistadelrincon.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-7-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoT4RV11VBHk5vCGNC4l
oqkKESntAf0XtoDPZnw+yT5XPGkKla+78t/d6oTYKoZ3JOjvC6ZMgRM46nzPwTuD
Ue1ZqfKluT4m3tYVmWYrFEoqrxP16xH/BnUwW7WuRup1hyODx9m5SEj++heaH6i6
8B7ywTfoZMBx258zp65krnsLVJepLJTU49wHkxusOWBP7S3iafQ+8UY38Bg8G2eV
vSdXTXQkHIDoTraFeXNlIVvAGSSRn35NepRjeYEYowr/gW48nN9oRp2r6HETVR5i
9HY2NzfiB71kzxdLLnaiyl4O7xs4UVW7GPJ37goETNuW6CDqYRj6BViYLXMLmS4x
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2985184640047116150408282097654984053
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-7-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23545894580044268495184587293628528664197377069764665534495707184104578927423342629906148277173470803278757410130096699838515569647422470275532121538110597618007039465359687961903029528703833575249423578369534622406885578509242246573757671515879878614312209717256538275801013757673020251776926629606388382097766205218670511664321206425289904429875157180122783443041327681621727079977501606663669348088803708937750541908616555122260187272864841856336665925500809454816809745664056333729931569468981667278420326550584296834204841818973270470426614777515371541915017096165986245406984054460862229702066709027721462034849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5140cc5253ad4919caeafac952623661d5cff447
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-7-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.christiansaunders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ctsfw.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.daylis.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rejectshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shoecarnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.superlife.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vimpat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.globalprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.myonecondoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.onecondoms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.crowholdings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.eagletrading.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.will-agaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.homedics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.thomaseye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.avancecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.consorcio.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fontana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.treasurer.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.vinuni.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lassus.pdimcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.redicoppel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lifestyleproductsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mascolonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rgf-hr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.starvistalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.taxprotectionplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.timelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.altius360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.amsunsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.corehome.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.fiskerinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.inter.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.mercatus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.worldshopping.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.care.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mensajeria.itau.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.renovainvest.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.vinpearl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.portafolioinmobiliariocr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.brqualy.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.relacionamento.mercedesbenzconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s.brumbys.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s.crust.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s.donutking.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s.gloriajeanscoffees.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s.michels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s.pizzacapers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.send.krewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.botejyu.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.pursehouserural.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.travel.margaritavilleresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twicedaily.pdimcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vc.marche.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.ujafedny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ages.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bedsonmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.care.vinmec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.celebrate.korbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.circlek.pdimcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.edd.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.kinvo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.beckinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.vinfastauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.vinhomes.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.creditstrong.austincapitalbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.hypera.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.devemail.pdisoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.coliban.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.digital.gruposaga.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.caldercasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.derbycitygaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.empowersvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fairgroundsracecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.harlowscasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.newportrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.novavax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oakgrovegaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oceandowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oxfordcasino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.paracogas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.presqueisledowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.riverwalkvicksburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.soundseasy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.turfway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.weissratings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.aggienetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.briviact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.buenavistadelrincon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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