san-12-s50.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:77:53:7d:fe:50:7d:3a:d0:f4:19:b6:31:20:87:13 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:77:53:7d:fe:50:7d:3a:d0:f4:19:b6:31:20:87:13
Serial Number (int): 15241084702023634402393414036493469459
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:16:aa:52:fd:7b:31:24:16:fd:ca:df:8a:56:b5:e0:7d:23:26:52
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): fe:9f:2e:6f:a3:55:b6:29:5d:5a:46:07:e7:23:01:9b:d5:6a:c1:69
Fingerprint (sha256): aa:79:f6:38:8f:7b:30:b3:cd:04:f3:c8:21:ce:4e:2f:4c:03:f1:ae:68:d9:13:7f:0a:34:26:60:18:ee:33:00

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-12-s50.tlsprovisioning.exacttarget.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-12-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-12-s50.tlsprovisioning.exacttarget.com
image.notificacoes.avantenestle.com.br
image.email.mainova.de
image.email.dubaifuture.ae
image.crm.nissan.com.eg
image.cloudacb.com
image.mail.news-doppelganger.it
image.sf.oxylio.com
image.info.rcifinancialservices.co.uk
image.link.hellofresh.jp
image.mail-bonaldi.eurocaritalia.it
image.mail-vicentini.eurocaritalia.it
image.experience.geely.co.il
image.email.ba-sh.com
image.marketing.testaankoop.be
image.hello.rustica.fr
image.hello.systemed.fr
image.email.beds.es
image.email.campagnolo.com
image.mail.nestlehealthscience.ca
image.newsletter.environnement.brussels
image.zurichintlife.co.uk
image.c.rituals.com
image.communications.ana-natural-performance.com
image.email.biholiday.com
image.komunikaty.nestbank.info
image.anz.castrol.email
image.email.gruppolunelli.it
image.portobusinessschool.pt
image.global.castrol.email
image.mc.dfv-fleisch-backmedien.de
image.mail.hellosmoove.com
image.campagne.zurich.it
image.campagnecrm.zurich-connect.it
image.centrodiagnosticoitaliano.com
image.info.mof.gov.il
image.info.open.ac.uk
image.quviviq.com
image.talk.baldinini.it
image.comms.healthservice.ie
image.news.impo.ch
image.news.livique.ch
image.news.lumimart.ch
image.novidades.gatopreto.com
image.communication.vwcv.ie
image.info.coimaht.com
image.news.cving.com
image.coronadirect.be
image.news.interwetten.com
image.roxi.tv
image.email.movelia.es
image.news.coop-city.ch
image.news.fostershollywood.es
image.email.merlinbreaks.co.uk
image.email.paultonsbreaks.com
image.meinpoco.com
image.news.fooby.ch
image.comms.diageo.com
image.email.new-weight.de
image.marketing.shamir.pt
image.e.hubsub.nl
image.email.ideeperviaggiare.it
image.info.tinabanasalud.es
image.email.bisol.it
image.email.ferraritrento.it
image.email.locandamargon.it
image.email.segnana.it
image.email.surgiva.it
image.email.tenutelunelli.it
image.info.euc.ac.cy
image.online.aromas.es
image.mailer.nomobank.com
image.twoj.santanderconsumer.pl
image.e.oneandonlyresorts.com
image.email.head.com
image.info.rcibanque.com
image.mc.chimieyewear.com
image.news.yves-rocher.com.tr
image.qa-marketing.xarvio.com
image.info.jumbo.ch
image.nabacloud.naba.it
image.web.domusacademy.it

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-12-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymPiVAUW5UeFF3pHs5Kb
OMcixuT+QCdGufBdgLE+xA8OzG17FbfDQr6n1x7jksdEBM8IdQz5YwxQUc8avRGr
sM+B8Jsmi3TJhTvXnpjAm/kFWl//IWSwdgEG2DV2YsmiTppImgNO2LyEsx52njsi
mejc+vytL5GHSl4DCgOSBHD1W1cEz36D1RgxrZu9iKzdMNGxb6/VGgdMgUZiKsB9
tFqbgm/lykox7ndMvqgQMN633ByvgMeUau9DMnQjmT+1ehOZuNq8xXuDsMt1G74p
v6ER8fKX48UBz5odSdEgd3IP75aZ9XOmj5OaPdM6hSYIkisbIy6PDPPEd46UDqvO
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15241084702023634402393414036493469459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-12-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25549392285909488516347135166259825773951197393238827436402929954889379161254855463910609232207226648598065851972213340011831081895510850566887867816403367295342040974014451731009968593114986644880638293752269375681743504733116714884390614571497266452732559447956095900374048603620946949477624573664575480362827083748019076577084211549525791445599938793054656122221032857874654109868397369401788447253872048184730734218587221070179589458588929828629741575917607618745284816152919750637866889478727526657056773684610203044138326008345705386200672249682277628413850245046725292571088703197029857471832676840150701690561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9016aa52fd7b312416fdcadf8a56b5e07d232652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-12-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.notificacoes.avantenestle.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mainova.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dubaifuture.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.nissan.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cloudacb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.news-doppelganger.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.oxylio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rcifinancialservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.link.hellofresh.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-bonaldi.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail-vicentini.eurocaritalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.geely.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ba-sh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.testaankoop.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.rustica.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.systemed.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.beds.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.campagnolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nestlehealthscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.environnement.brussels'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.zurichintlife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.ana-natural-performance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.biholiday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.komunikaty.nestbank.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.anz.castrol.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.gruppolunelli.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.portobusinessschool.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global.castrol.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.dfv-fleisch-backmedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.hellosmoove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campagne.zurich.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.campagnecrm.zurich-connect.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.centrodiagnosticoitaliano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mof.gov.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.open.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.quviviq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.talk.baldinini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.healthservice.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.impo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.livique.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidades.gatopreto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.vwcv.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.coimaht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.cving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.coronadirect.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.interwetten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.roxi.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.movelia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.coop-city.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.fostershollywood.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.merlinbreaks.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.paultonsbreaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.meinpoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.fooby.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.diageo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.new-weight.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.shamir.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hubsub.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ideeperviaggiare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.tinabanasalud.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bisol.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ferraritrento.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.locandamargon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.segnana.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.surgiva.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tenutelunelli.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.euc.ac.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.online.aromas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailer.nomobank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twoj.santanderconsumer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.oneandonlyresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.head.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.rcibanque.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.chimieyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.yves-rocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.qa-marketing.xarvio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.jumbo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nabacloud.naba.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.domusacademy.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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