san-2-s7.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:e4:8f:72:b6:f9:29:75:0d:f7:62:26:1b:f6:54:31 was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:e4:8f:72:b6:f9:29:75:0d:f7:62:26:1b:f6:54:31
Serial Number (int): 19795945097946101827833442537372537905
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c0:d1:0e:40:82:ea:d2:4e:78:5e:9d:c7:06:01:f6:0b:68:1e:d7:61
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ad:52:29:d2:a5:61:73:2a:01:2a:f8:8e:f1:ed:8d:72:14:1a:ce:09
Fingerprint (sha256): c1:b1:b4:31:e5:7d:67:c6:53:f8:10:5b:ad:67:2d:a1:7a:41:15:1c:b8:a9:2f:3e:6b:3d:85:fb:20:5f:85:91

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-2-s7.tlsprovisioning.exacttarget.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-2-s7.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-2-s7.tlsprovisioning.exacttarget.com
image.emails.dteopen.com
image.emails.pmiandu.com
image.emails.pmiopen.com
image.gavi-vaccinealliance.org
image.jjconsumerprofessional.co.uk
image.mail.bpd.nl
image.mail.janssenpro.jp
image.mail.rbhconnect.ca
image.e.outdoors.org
image.email.infinitylaw.net
image.experience.michelin.com
image.info.mapfre.es
image.email.cbssports.com
image.email.teladochealth.com
image.maxpreps-email.com
image.toyota-th.com
image.email.pvhba.com
image.email-us.lorealprofessionnel.com
image.info.pepcidprofessional.com
image.patientsupport.emdserono.com
image.advmail.georgetown.edu
image.e.actalentservices.com
image.email.oporto.com.au
image.mail.getninjas.com.br
image.email.chandon.com.br
image.email.lidl.pl
image.mail.cerave.ca
image.members.lexus.jp
image.promotions.sprouts.com
image.email-bylawyers.com
image.mail.tnt.com
image.newsletter.marvelis.de
image.e.hetvergetenkind.nl
image.email.chateaugaloupet.com
image.email.fundacionmapfreguanarteme.com
image.email.jnjbrasil.com.br
image.email.westernsydneyonline.edu.au
image.endurance.usatventures.com
image.sfmctest.mconnectus.com
image.2merck.com
image.community.hillel.org
image.e.localiza.com
image.email.nick.com
image.m.afdigital.com
image.mail.beautyluxe.cl
image.e.justrightpetfood.com
image.e.purina.com
image.e.purinastore.com
image.email.scprt.industries
image.email.trocaire.org
image.events.usatventures.com
image.global.jeccomposites.com
image.info.endeavourconsumer.com
image.lidlhome.lidl.com
image.sfmc.petfinder.com
image.aesculap-academy.news
image.email.mycareclubrewards.ca
image.shokuiki.tokiomarine-nichido.co.jp
image.e.onlineloans.com.au
image.e.woolloo.com
image.mail.mugler.ca
image.mail1.moneytimes.com.br
image.dm.felissimo.co.jp
image.mail.dermaclub.com.mx
image.connect.udayton.edu
image.e-vanguard.com.au
image.e-vanguardjapan.jp
image.news.loggi.com
image.beautynews.mx
image.mail.laroche-posay.com.ar
image.mail.professionalproducts.loreal.ca
image.mail.valentino-beauty.ca
image.mail.vichy.com.ar
image.simplify.vivint.com
image.mails.astonmartin.com
image.cropnutrition.mosaicco.com
image.e.flightcentre.ca
image.e.libertytravel.com
image.innatpatricksquare-email.com
image.mail.avantitravelinsurance.co.uk
image.mail.aveenomd.com
image.mail.legendstour.com
image.mail.payingtoomuch.com
image.unicoistatepark-email.com
image.e.ldvtravel.ca

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com
san-6-s13.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-2-s7.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO8DCCDdigAwIBAgIQDuSPcrb5KXUN92ImG/ZUMTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjAzMTcwMDAwMDBa
Fw0yMzAzMjEyMzU5NTlaMIGMMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv
cm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEdMBsGA1UEChMUU0FMRVNGT1JD
RS5DT00sIElOQy4xMTAvBgNVBAMTKHNhbi0yLXM3LnRsc3Byb3Zpc2lvbmluZy5l
eGFjdHRhcmdldC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo
6/Z/MwicBeEPKNJAkc2z47JAAvTExdo+iiT2tRD9RIm3Viq5TYEU5OnP1sNgHl1A
8/pTdJXJo1SkugvdZTlXuyzRlbgy5yxcUbiqfkrhdVrzC3ME/zyb22qgmFsSTftF
e1kANbscmC+PXI6Eln9M2bOqnHfLR2BVKa6L8/z81Bpzch7Ll7/ThvvCN/mjti/w
lIpW+qAw1bJqNPcMLNvMjJ9G5/I7izDbv9YraqZp9T438rrLn+O5uTrJ0cjuAZMf
vtKGUALIiuwmcr26AP8YikwcOewsOSdnpZlA01d3dI6sFi+b5Dc2k72sGv+BU3w2
tZvLMfo0B9f0JoYXhVHDAgMBAAGjgguIMIILhDAfBgNVHSMEGDAWgBS3a6LqqKqE
jHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUwNEOQILq0k54Xp3HBgH2C2ge12Ewggme
BgNVHREEggmVMIIJkYIoc2FuLTItczcudGxzcHJvdmlzaW9uaW5nLmV4YWN0dGFy
Z2V0LmNvbYIYaW1hZ2UuZW1haWxzLmR0ZW9wZW4uY29tghhpbWFnZS5lbWFpbHMu
cG1pYW5kdS5jb22CGGltYWdlLmVtYWlscy5wbWlvcGVuLmNvbYIeaW1hZ2UuZ2F2
aS12YWNjaW5lYWxsaWFuY2Uub3JngiJpbWFnZS5qamNvbnN1bWVycHJvZmVzc2lv
bmFsLmNvLnVrghFpbWFnZS5tYWlsLmJwZC5ubIIYaW1hZ2UubWFpbC5qYW5zc2Vu
cHJvLmpwghhpbWFnZS5tYWlsLnJiaGNvbm5lY3QuY2GCFGltYWdlLmUub3V0ZG9v
cnMub3JnghtpbWFnZS5lbWFpbC5pbmZpbml0eWxhdy5uZXSCHWltYWdlLmV4cGVy
aWVuY2UubWljaGVsaW4uY29tghRpbWFnZS5pbmZvLm1hcGZyZS5lc4IZaW1hZ2Uu
ZW1haWwuY2Jzc3BvcnRzLmNvbYIdaW1hZ2UuZW1haWwudGVsYWRvY2hlYWx0aC5j
b22CGGltYWdlLm1heHByZXBzLWVtYWlsLmNvbYITaW1hZ2UudG95b3RhLXRoLmNv
bYIVaW1hZ2UuZW1haWwucHZoYmEuY29tgiZpbWFnZS5lbWFpbC11cy5sb3JlYWxw
cm9mZXNzaW9ubmVsLmNvbYIhaW1hZ2UuaW5mby5wZXBjaWRwcm9mZXNzaW9uYWwu
Y29tgiJpbWFnZS5wYXRpZW50c3VwcG9ydC5lbWRzZXJvbm8uY29tghxpbWFnZS5h
ZHZtYWlsLmdlb3JnZXRvd24uZWR1ghxpbWFnZS5lLmFjdGFsZW50c2VydmljZXMu
Y29tghlpbWFnZS5lbWFpbC5vcG9ydG8uY29tLmF1ghtpbWFnZS5tYWlsLmdldG5p
bmphcy5jb20uYnKCGmltYWdlLmVtYWlsLmNoYW5kb24uY29tLmJyghNpbWFnZS5l
bWFpbC5saWRsLnBsghRpbWFnZS5tYWlsLmNlcmF2ZS5jYYIWaW1hZ2UubWVtYmVy
cy5sZXh1cy5qcIIcaW1hZ2UucHJvbW90aW9ucy5zcHJvdXRzLmNvbYIZaW1hZ2Uu
ZW1haWwtYnlsYXd5ZXJzLmNvbYISaW1hZ2UubWFpbC50bnQuY29tghxpbWFnZS5u
ZXdzbGV0dGVyLm1hcnZlbGlzLmRlghppbWFnZS5lLmhldHZlcmdldGVua2luZC5u
bIIfaW1hZ2UuZW1haWwuY2hhdGVhdWdhbG91cGV0LmNvbYIpaW1hZ2UuZW1haWwu
ZnVuZGFjaW9ubWFwZnJlZ3VhbmFydGVtZS5jb22CHGltYWdlLmVtYWlsLmpuamJy
YXNpbC5jb20uYnKCJmltYWdlLmVtYWlsLndlc3Rlcm5zeWRuZXlvbmxpbmUuZWR1
LmF1giBpbWFnZS5lbmR1cmFuY2UudXNhdHZlbnR1cmVzLmNvbYIdaW1hZ2Uuc2Zt
Y3Rlc3QubWNvbm5lY3R1cy5jb22CEGltYWdlLjJtZXJjay5jb22CGmltYWdlLmNv
bW11bml0eS5oaWxsZWwub3JnghRpbWFnZS5lLmxvY2FsaXphLmNvbYIUaW1hZ2Uu
ZW1haWwubmljay5jb22CFWltYWdlLm0uYWZkaWdpdGFsLmNvbYIYaW1hZ2UubWFp
bC5iZWF1dHlsdXhlLmNsghxpbWFnZS5lLmp1c3RyaWdodHBldGZvb2QuY29tghJp
bWFnZS5lLnB1cmluYS5jb22CF2ltYWdlLmUucHVyaW5hc3RvcmUuY29tghxpbWFn
ZS5lbWFpbC5zY3BydC5pbmR1c3RyaWVzghhpbWFnZS5lbWFpbC50cm9jYWlyZS5v
cmeCHWltYWdlLmV2ZW50cy51c2F0dmVudHVyZXMuY29tgh5pbWFnZS5nbG9iYWwu
amVjY29tcG9zaXRlcy5jb22CIGltYWdlLmluZm8uZW5kZWF2b3VyY29uc3VtZXIu
Y29tghdpbWFnZS5saWRsaG9tZS5saWRsLmNvbYIYaW1hZ2Uuc2ZtYy5wZXRmaW5k
ZXIuY29tghtpbWFnZS5hZXNjdWxhcC1hY2FkZW15Lm5ld3OCIGltYWdlLmVtYWls
Lm15Y2FyZWNsdWJyZXdhcmRzLmNhgihpbWFnZS5zaG9rdWlraS50b2tpb21hcmlu
ZS1uaWNoaWRvLmNvLmpwghppbWFnZS5lLm9ubGluZWxvYW5zLmNvbS5hdYITaW1h
Z2UuZS53b29sbG9vLmNvbYIUaW1hZ2UubWFpbC5tdWdsZXIuY2GCHWltYWdlLm1h
aWwxLm1vbmV5dGltZXMuY29tLmJyghhpbWFnZS5kbS5mZWxpc3NpbW8uY28uanCC
G2ltYWdlLm1haWwuZGVybWFjbHViLmNvbS5teIIZaW1hZ2UuY29ubmVjdC51ZGF5
dG9uLmVkdYIXaW1hZ2UuZS12YW5ndWFyZC5jb20uYXWCGGltYWdlLmUtdmFuZ3Vh
cmRqYXBhbi5qcIIUaW1hZ2UubmV3cy5sb2dnaS5jb22CE2ltYWdlLmJlYXV0eW5l
d3MubXiCH2ltYWdlLm1haWwubGFyb2NoZS1wb3NheS5jb20uYXKCKWltYWdlLm1h
aWwucHJvZmVzc2lvbmFscHJvZHVjdHMubG9yZWFsLmNhgh5pbWFnZS5tYWlsLnZh
bGVudGluby1iZWF1dHkuY2GCF2ltYWdlLm1haWwudmljaHkuY29tLmFyghlpbWFn
ZS5zaW1wbGlmeS52aXZpbnQuY29tghtpbWFnZS5tYWlscy5hc3Rvbm1hcnRpbi5j
b22CIGltYWdlLmNyb3BudXRyaXRpb24ubW9zYWljY28uY29tghdpbWFnZS5lLmZs
aWdodGNlbnRyZS5jYYIZaW1hZ2UuZS5saWJlcnR5dHJhdmVsLmNvbYIiaW1hZ2Uu
aW5uYXRwYXRyaWNrc3F1YXJlLWVtYWlsLmNvbYImaW1hZ2UubWFpbC5hdmFudGl0
cmF2ZWxpbnN1cmFuY2UuY28udWuCF2ltYWdlLm1haWwuYXZlZW5vbWQuY29tghpp
bWFnZS5tYWlsLmxlZ2VuZHN0b3VyLmNvbYIcaW1hZ2UubWFpbC5wYXlpbmd0b29t
dWNoLmNvbYIfaW1hZ2UudW5pY29pc3RhdGVwYXJrLWVtYWlsLmNvbYIUaW1hZ2Uu
ZS5sZHZ0cmF2ZWwuY2EwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5k
aWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECg
PqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEy
NTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH
AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEw
JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcw
AoY9aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hB
MjU2MjAyMENBMS0xLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQA7IEP83s/rRaH3HDlk/PIQauuoKf/90N+a/yaW
CjW6Wr9+jshBAszg6uC3IMZOJ40fxjXtjNJfvkyzu743jQUfcPAeZFsqwAi9VsKY
JcOnwoE8d/2Q+1W+f9ozR9pna78KkjdAjbHZIAWPAta+//No2iOziMC+IwNmb+s4
hDU4nUVJYEjLvN/ewzuLE31FGeBkHQumn1gDzBwvFtTtTui4Vj5mLZHQPToRzWWV
/oJCFh6QvvRB3gnb1itKl5G1Sa4WS9nBS7tNnmmf6mHEwmHpa+/+75pk9RJwL+U2
qpvfLdjTwk/2KEq8KVWr5uv2XLv6oBdysM89Dt2vlJ1Cv5e2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOv2fzMInAXhDyjSQJHN
s+OyQAL0xMXaPook9rUQ/USJt1YquU2BFOTpz9bDYB5dQPP6U3SVyaNUpLoL3WU5
V7ss0ZW4MucsXFG4qn5K4XVa8wtzBP88m9tqoJhbEk37RXtZADW7HJgvj1yOhJZ/
TNmzqpx3y0dgVSmui/P8/NQac3Iey5e/04b7wjf5o7Yv8JSKVvqgMNWyajT3DCzb
zIyfRufyO4sw27/WK2qmafU+N/K6y5/jubk6ydHI7gGTH77ShlACyIrsJnK9ugD/
GIpMHDnsLDknZ6WZQNNXd3SOrBYvm+Q3NpO9rBr/gVN8NrWbyzH6NAfX9CaGF4VR
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19795945097946101827833442537372537905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-2-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21324392866349195119738698244160458760331508078413808023897024549650150863414496334711761616774574749678350699676484995151574799801853540076731333434222704846898400019867966537120084932077031419196761521260612506945629329415939586884510564879365363799859167778592242068397516358778896877066259358426287579442822809157632602810941751531340928372757910193834958303932187744853155238290848290381261269113584010497426988648789396538257986158279901938117873933144348742259533875263196299447607513763736337082410775165189738149846497535788623050162937050857659964794386213495158130399336507813189901642069802261234028204483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0d10e4082ead24e785e9dc70601f60b681ed761
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2453 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-2-s7.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.dteopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pmiandu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pmiopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gavi-vaccinealliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.jjconsumerprofessional.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.bpd.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.janssenpro.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.rbhconnect.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.outdoors.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.infinitylaw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experience.michelin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mapfre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cbssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.teladochealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.maxpreps-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.toyota-th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pvhba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-us.lorealprofessionnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.pepcidprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.patientsupport.emdserono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.advmail.georgetown.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.actalentservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.oporto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.getninjas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chandon.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lidl.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cerave.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.lexus.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.promotions.sprouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-bylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.tnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.newsletter.marvelis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.hetvergetenkind.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.chateaugaloupet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fundacionmapfreguanarteme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.jnjbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.westernsydneyonline.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.endurance.usatventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmctest.mconnectus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.2merck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.hillel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.localiza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.nick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.afdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.beautyluxe.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.justrightpetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.purina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.purinastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.scprt.industries'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.trocaire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.events.usatventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.global.jeccomposites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.endeavourconsumer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lidlhome.lidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.petfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.aesculap-academy.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mycareclubrewards.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shokuiki.tokiomarine-nichido.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.onlineloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.woolloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.mugler.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail1.moneytimes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.dm.felissimo.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.dermaclub.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.udayton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-vanguard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-vanguardjapan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.loggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.beautynews.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.laroche-posay.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.professionalproducts.loreal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.valentino-beauty.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vichy.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.simplify.vivint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mails.astonmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cropnutrition.mosaicco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.libertytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.innatpatricksquare-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.avantitravelinsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.aveenomd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.legendstour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.payingtoomuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.unicoistatepark-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.ldvtravel.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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