san-17-s12.tlsprovisioning.exacttarget.com

- Salesforce, Inc. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 03:7c:24:1f:55:27:2b:93:6b:ae:d4:4e:6c:ea:41:b0 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:7c:24:1f:55:27:2b:93:6b:ae:d4:4e:6c:ea:41:b0
Serial Number (int): 4632261446985415369947746477347062192
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b1:6a:a8:e2:12:34:d5:66:4d:32:bf:59:a3:34:ee:11:bc:b0:4f:a5
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): 68:82:ab:49:66:26:33:49:fb:9d:a2:96:76:fe:5b:76:e1:21:91:e4
Fingerprint (sha256): ab:5f:c2:d5:c0:1d:ca:2f:5a:dd:8a:8c:a1:ae:ed:24:88:b5:80:4f:c3:89:35:70:10:4d:e6:7a:f9:29:8a:df

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate san-17-s12.tlsprovisioning.exacttarget.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-17-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-17-s12.tlsprovisioning.exacttarget.com
image.absninfo.mountsaintvincent.edu
image.asia.tommy.com
image.casaybaoficial.com
image.contact.mdpro.com
image.dandystache.cstoresavings.com
image.dm.club.seibugroup.jp
image.e.clueylearning.com
image.e.codecamp.com.au
image.e.crystalbrookcollection.com
image.e.frontsteps.com
image.e.giantride.com.au
image.e.gocovri.com
image.e.gocovrihcp.com
image.e.lifeway.com
image.e.rehealth.com.hk
image.e.risd.edu
image.e.scu.mb.ca
image.e.simplifycompliance.com
image.e.supernus.com
image.e.texasfcs.com
image.em.shangri-lacircle.com
image.em.springworkstx.com
image.email.advisorsmortgage.com
image.email.bbby.com
image.email.bedbathandbeyond.ca
image.email.bedbathandbeyond.com
image.email.buybuybaby.com
image.email.ccmi.com
image.email.cgccomics.com
image.email.collectiblesgroup.com
image.email.csgcards.com
image.email.docusign.com
image.email.gitlab.cn
image.email.harmondiscount.com
image.email.medora.com
image.email.niufoods.cl
image.email.nrdc.org
image.email.pmgnotes.com
image.email.resmed.com
image.email.tredish.com
image.emails.athena.com.au
image.emails.buybuybaby.ca
image.eml.dermavant.com
image.enews.cdspi.com
image.go.encourageme.com
image.go.henryscheinortho.com
image.hcp.springworkstx.com
image.hello.hit.com.au
image.hello.kinderling.com.au
image.hello.listnr.com
image.hello.press-start.com.au
image.hello.triplem.com.au
image.info.bellagroup.com
image.info.dermavant.com
image.insider.oseg.ca
image.ivoy.solutions
image.m.stoneside.com
image.mail.adsinc.com
image.mail.angelcity.com
image.mail.columbiabooks.com
image.mail.culturalcare.com
image.mail.encoura.org
image.mail.encourageme.com
image.mail.federalfundmanagement.com
image.mail.getforesight.com
image.mail.myoptions.org
image.mail.nextdayoption.com
image.mail.pioneermilitarycredit.com
image.mail.safesitehq.com
image.mail.sparks-parquedamonica.com.br
image.mail.thealmanacofamericanpolitics.com
image.mail.thompsonctsb.com
image.mail.thompsonenergyexpert.com
image.mail.thompsonfda.com
image.mail.thompsonfnsc.com
image.mail.thompsongovcon.com
image.mail.unicred.com.br
image.mailer.sgcarmart.com
image.marketing.gorilla.clinic
image.marketing.vtprealty.in
image.mc.floydfamilycampground.com
image.mkt.inflor.com
image.mkt.pbastones.com.br
image.m-mail.clear.co
image.news.bch.org
image.planon.fbhp.com
image.promocionesoh.pe
image.promotions.aurobindorealty.com
image.realestate.colliers.com
image.sarahforalaska.gop
image.service.unitedveincenters.com
image.sfmc.ventev.com
image.tualiado.credicomer.com.sv

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-17-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEByI33tdcJA8P3w3VauybhqS3OzwA
kM3C2PjN/z4RIukboWcbWeQHOjq1MlURSIqQqcwbmchT6p+IcWb0mhmPkg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4632261446985415369947746477347062192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-17-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004072237ded75c240f0fdf0dd56aec9b86a4b73b3c0090cdc2d8f8cdff3e1122e91ba1671b59e4073a3ab5325511488a90a9cc1b99c853ea9f887166f49a198f92
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b16aa8e21234d5664d32bf59a334ee11bcb04fa5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-17-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.absninfo.mountsaintvincent.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.asia.tommy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.casaybaoficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mdpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dandystache.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.club.seibugroup.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.clueylearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.codecamp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.crystalbrookcollection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.frontsteps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.giantride.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gocovri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gocovrihcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.lifeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.rehealth.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.risd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.scu.mb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.simplifycompliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.supernus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.texasfcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.shangri-lacircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.springworkstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.advisorsmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bbby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bedbathandbeyond.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bedbathandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.buybuybaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ccmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cgccomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.collectiblesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.csgcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.docusign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.gitlab.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.harmondiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.medora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.niufoods.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nrdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pmgnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.resmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.tredish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.athena.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.buybuybaby.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eml.dermavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.enews.cdspi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.encourageme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.henryscheinortho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hcp.springworkstx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.hit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.kinderling.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.listnr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.press-start.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.triplem.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.bellagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.dermavant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insider.oseg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ivoy.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.stoneside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.adsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.angelcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.columbiabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.culturalcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.encoura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.encourageme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.federalfundmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.getforesight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.myoptions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nextdayoption.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.pioneermilitarycredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.safesitehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.sparks-parquedamonica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.thealmanacofamericanpolitics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.thompsonctsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.thompsonenergyexpert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.thompsonfda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.thompsonfnsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.thompsongovcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.unicred.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailer.sgcarmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.gorilla.clinic'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.vtprealty.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.floydfamilycampground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.inflor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.pbastones.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m-mail.clear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.bch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.planon.fbhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.promocionesoh.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.promotions.aurobindorealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.realestate.colliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sarahforalaska.gop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.service.unitedveincenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.ventev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tualiado.credicomer.com.sv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 6758784441351057306791185625600477505071072281939011233925822039062496741654495440531708108485350691117035068006115
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786074316844843667582215791532185798540333702601058766268754185858355848773572801866687191526769532386623760343255