san-8-s50.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:ba:ca:a9:af:cf:17:30:23:29:e1:66:1e:72:5f:33 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ba:ca:a9:af:cf:17:30:23:29:e1:66:1e:72:5f:33
Serial Number (int): 14262157664246273081845674473711361843
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8d:a6:22:b2:4e:54:b4:94:ca:f7:e8:53:d2:4e:8f:58:41:10:9c:1f
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 62:f3:b3:97:2a:7c:f5:71:7e:ae:25:e6:ec:75:e4:2d:52:c0:6e:a8
Fingerprint (sha256): a4:20:41:f8:c8:53:07:47:9d:e1:f7:00:b1:68:cc:ec:33:71:3b:c8:d7:6b:51:aa:47:1f:48:87:6b:fa:30:be

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-8-s50.tlsprovisioning.exacttarget.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-8-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-8-s50.tlsprovisioning.exacttarget.com
image.comunicacion.elcomercio.es
image.comunicacion.eldiariomontanes.es
image.comunicacion.elnortedecastilla.es
image.comunicacion.ideal.es
image.comunicacion.lagacetadesalamanca.es
image.comunicacion.larioja.com
image.comunicacion.lasprovincias.es
image.comunicacion.laverdad.es
image.comunicacion.lavozdegalicia.es
image.comunicacion.lavozdigital.es
image.comunicaciones.diariovasco.com
image.crm.missoni.com
image.mktcsf.net
image.spw.email
image.comunicacion.diariosur.es
image.email.awtrade-alpitour.it
image.eu.vinfastauto.com
image.mail1.partager.io
image.info.bricomarche.com
image.mail.primark.com
image.e.partou.nl
image.email.helioshotels.com
image.molsheim.bugatti.com
image.e.bygghemma.se
image.email.podme.com
image.info.tazz.ro
image.it.tagcandidate.com
image.mail.linda.nl
image.comunicaciones.vodafone.es
image.e.golvpoolen.se
image.email.contescarpemoda.it
image.marketing.carasso-nadlan.co.il
image.e.badshop.se
image.e.bygghjemme.no
image.e.byggshop.se
image.e.golvshop.se
image.e.mojedelo.com
image.e.polarpumpen.se
image.email.eon.de
image.email.ford-koegler.de
image.comm.genesisenergies.com
image.e.icm.com
image.e.icmcapital.co.uk
image.e.icmcapital.com
image.e.icmcapital.mu
image.e.kucoin.com
image.email.audiovitality.com
image.greenstone-funds.it
image.mail.omronhealthcare.la
image.marketing.dubaicommercity.ae
image.marketing.villarrealcf.es
image.messaggi.intesasanpaolo.com
image.newsletter.pmiscience.com
image.service.landal.com
image.email.aqualung.com
image.email.holidayclub.fi
image.hi.campmanyabogados.com
image.news.silvertours.tech
image.communication.cupraofficial.ie
image.e.dyson.dk
image.e.dyson.no
image.e.dyson.pt
image.e.dyson.se
image.e.fi.dyson.com
image.u.universitaria.com
image.go-myahmed.com
image.ww.wormland.de
image.email.camomillaitalia.net
image.email.unicef.fi
image.lp.audi.ro
image.info.animoscope.com
image.mail.mavalerio.com.br
image.marketing.cdmirandes.fans
image.marketing-chevalier-conservation.com
image.marketing-pouyanne-paris.com
image.marketing-wartnerhome.com
image.marketing-wartnerpro.com
image.news.wellness-sportclub.fr
image.shop.caffeborbone.com
image.xgfx-europe.fujifilm.com
image.email.marley.co.uk
image.contact.saforelle.com
image.dispersion-resin-additive.basf.com
image.livecasinoshouse.com
image.mcloud.immoverkauf24.de
image.comms.sjpp.co.uk
image.usapark-enews.com
image.email.h-moser.com
image.newsletter.suotstudio.com
image.sinun.media.fi
image.info.icl.digital
image.news.sapiolife.it
image.marketing.hermitage.nl
image.nissanao.nissan.co.th
image.content.msc.com
image.email.newindfoods.com
image.lp.volkswagen.ro
image.marketing.formue.com
image.email.primonialreim.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-8-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7GHTTmj+tcMLUbqc8eu
FdoSnIeEbIH+CsG2NA23XKKzMacBFwzDkbM9s34kJ2IlV050N9TSBvJ72TniitSF
gpAqj0c6C2rNjjhiavFgEpCr0iM2RfX/3UoOuPU3CP31o4JOOZS2H+wmT6UmHf3B
JJoFmyfkCv4kWnrYk6Xay01k767619RXQM/9VQQIseg7hdMEI6eZyO+EpM8GV8Au
6tS1UH41nF3iU6MY/WHfl+oMSuuo05GUUsXCTPY7RFeCxQN1foi4LxlMHLRECW1G
3+xdqgz0qS9xgwR3HdrauooDHl3ygtirWJKeLIcQWl3TeEWaQGnTDZaBTs99JVWD
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14262157664246273081845674473711361843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-8-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24199058825527349578319610162796349345499967327933852399530835995623567364998103347551867526848366452201351656748010887861081702007645298975313539946980499841644088405908499187906875174327864298436260377719628842919900116285916576837641890758994750234429995236591024383211090716113257224899079036694762237841795327081440772321298691924322036715785385454759432880302194525059621513041686434814243729495634121474417330564478714010413081547881621614843755229187820544395350999124672371103096904117312686059985288385886922843593536793754345949064352621370280328626384564046130747597159081700466563952631843786385664607229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8da622b24e54b494caf7e853d24e8f5841109c1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2813 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-8-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.elcomercio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.eldiariomontanes.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.elnortedecastilla.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.ideal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.lagacetadesalamanca.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.larioja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.lasprovincias.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.laverdad.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.lavozdegalicia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.lavozdigital.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.diariovasco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.missoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktcsf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.spw.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.diariosur.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.awtrade-alpitour.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eu.vinfastauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.partager.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bricomarche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.primark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.partou.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.helioshotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.molsheim.bugatti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bygghemma.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.podme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.tazz.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.it.tagcandidate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.linda.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.vodafone.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.golvpoolen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.contescarpemoda.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.carasso-nadlan.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.badshop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bygghjemme.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.byggshop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.golvshop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mojedelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.polarpumpen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.eon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ford-koegler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comm.genesisenergies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.icm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.icmcapital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.icmcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.icmcapital.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.kucoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.audiovitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.greenstone-funds.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.omronhealthcare.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.dubaicommercity.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.villarrealcf.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messaggi.intesasanpaolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.pmiscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.landal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.aqualung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.holidayclub.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hi.campmanyabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.silvertours.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.cupraofficial.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fi.dyson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.u.universitaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go-myahmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ww.wormland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.camomillaitalia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.unicef.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.audi.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.animoscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mavalerio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.cdmirandes.fans'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-chevalier-conservation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-pouyanne-paris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-wartnerhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-wartnerpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.wellness-sportclub.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shop.caffeborbone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.xgfx-europe.fujifilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.marley.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.saforelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dispersion-resin-additive.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.livecasinoshouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mcloud.immoverkauf24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.sjpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.usapark-enews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.h-moser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.suotstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sinun.media.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.icl.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.sapiolife.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.hermitage.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nissanao.nissan.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.msc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.newindfoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.volkswagen.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.formue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.primonialreim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017fad9100ea000004030047304502206ca783df3b83cb8b895c3f062538132bc0f94e471fee1f04bd24f8d79e16d490022100ae21fd751d149a1c679fb30efb0431faedb04bedb139cb9e22e15ba079703c5500760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017fad9100d9000004030047304502200ac37462a18da3b571df7b021a8bd963ee70ff7b77e18964af01d126d765db88022100c937d8c38214167213341c7259b0f813a44ae498ac41b6ca957a16bb04c2fd3d007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017fad9100fa00000403004730450220273bf3c35e505180a7547c26a757d0516d2374e076062790b2b9fcf04c65956e022100818d40417d0655ca1dee7c28db4790d9521831a1d92658bb968c0f1fd46eb348
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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