www.carlsonmarketing.com

- Carlson Marketing Worldwide Inc -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number e9:cf:89:c6:00:b6:0a:8d:3f:cd:28:3a:83:ab:f7:e6 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Carlson Marketing Worldwide Inc

Organization: Carlson Marketing Worldwide Inc
Organization unit: IO
Organization unit: Hosted by Carlson Marketing Worldwide, Inc.
Organization unit: PlatinumSSL
Address: Suite 150
Address: 1405 Xenium Lane N.
Postal code: 55441
State / Province: MN
Locality: Plymouth
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e9:cf:89:c6:00:b6:0a:8d:3f:cd:28:3a:83:ab:f7:e6
Serial Number (int): 310787722845114060137302762706290079718
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c8:00:6f:c1:fa:0d:88:c1:e2:3e:75:77:81:61:3e:e5:17:0e:fe:d6
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): a1:ed:9e:c0:7d:67:3a:36:12:9c:41:0b:5e:b6:a4:1e:e8:64:a5:5c
Fingerprint (sha256): d4:be:d3:5e:63:bd:6b:3b:eb:7d:73:14:2d:a5:0e:dc:52:9c:7a:37:4c:22:5f:23:d4:29:a2:7e:12:68:7a:85

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate www.carlsonmarketing.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.carlsonmarketing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.carlsonmarketing.com
carlsonmarketing.com

Other certificates including the domain name carlsonmarketing.com

(limited to 100 certificates)
www.carlsonmarketing.com
digitalvault.carlsonmarketing.com
exl.demo.us.aimia.com
www.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
portal-qa.loyaltyops.carlsonmarketing.com
matrixcsrus-qa.carlsonmarketing.com
qa.merialrewardsclinicprogram.carlsonmarketing.com
us.aimia.com
portal.loyaltyops.carlsonmarketing.com
fusionTVR-qaua.us.aimia.com
merialrewardsplusclinic-qa.carlsonmarketing.com
fusiontvr.carlsonmarketing.com
us.aimia.com
clientreporting.carlsonmarketing.com
themix.us.aimia.com
fusiontvr-qaua.carlsonmarketing.com
merchwebadmin.carlsonmarketing.com
Carlsonmarketing.com
q17rptu.carlsonmarketing.com
digitalvault.us.aimia.com
gpsadmin-qa.carlsonmarketing.com
Carlsonmarketing.com
merialclinicprograms-qa.carlsonmarketing.com
membertvr-qa.carlsonmarketing.com
merialrewardsplus-qa.us.aimia.com
merialrewardsplusclinic-qa.us.aimia.com
p17rptu.carlsonmarketing.com
wsgateway.com
fusionTVR-qa.us.aimia.com
carlsonmarketing.com
www.carlsonmarketing.com
cca.carlsonmarketing.com
secure-edev-dev.carlsonmarketing.com
wsgateway.carlsonmarketing.com
digitalvault-qa.carlsonmarketing.com
exl.qa.carlsonmarketing.com
mycardlink-qa.us.aimia.com
merchwebadmin-qa.carlsonmarketing.com
swebstats.carlsonmarketing.com
membertvr-qaua.us.aimia.com
Carlsonmarketing.com
merialrewards-qa.carlsonmarketing.com
exl.demo.carlsonmarketing.com
exlreports.carlsonmarketing.com
fusiontvr-dev.carlsonmarketing.com
fusiontvr-qa.carlsonmarketing.com
cis.carlsonmarketing.com
membertvr-qaua.carlsonmarketing.com
secure-edev.carlsonmarketing.com
mycardlinksite-qa.carlsonmarketing.com
myglobalcard-qa.carlsonmarketing.com
entiera-report-qa.carlsonmarketing.com
gpsadmin-qa.us.aimia.com
merialrewardsclinicprogram-qa.us.aimia.com
merialrewardsplus-qa.carlsonmarketing.com
mycccoupon-qa.carlsonmarketing.com
clientreporting-qa.aimia.com
exlreports-qa.aimia.com
myCCCoupon-qa.us.aimia.com
www.carlsonmarketing.com
Carlsonmarketing.com
myglobalcardsite-qa.carlsonmarketing.com
merialclientconnectionplus-qa.carlsonmarketing.com
*.qa.carlsonmarketing.com
exl.carlsonmarketing.com
merialclientconnection-qa.carlsonmarketing.com
secure-ede.carlsonmarketing.com
exl.dev.carlsonmarketing.com
d17rptu.carlsonmarketing.com
clientreporting-qa.carlsonmarketing.com
matrixcsrus.carlsonmarketing.com
cca-qa.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
exl.us.aimia.com

Certificate

The complete raw certificate details for www.carlsonmarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8WxAKtD5rOeeTTgl+E
iscmaK2nen+QX50dz1Omm0uUCzW11KeVIp8AsvxjcYYt7UoP8WkWHDnqaqDlAgdn
Z0E/4Sm3MrPdBPx0tr8cNL/xKU0wGjmALSaXsxtVdglcOwFWY7dSIEq9xYyJTi7V
vVQtZJDxK/MSlSvHCUk3srn2eOz9Cgicpw+pW9Xp3a7VSYVniXcU3/P4CBdECuj4
4mWzXsWROTstta3YNC9cKGcWIAU5I7dJDPpi04Y+3aH5vFeLGK20y2xTPAPs5HgM
/mudujw4OCdc5D2hnq8VcVWtlVfcZKA3FyrnBxYIsflL6fVaR9yubFvARZMhEe9X
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310787722845114060137302762706290079718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55441'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suite 150'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1405 Xenium Lane N.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlson Marketing Worldwide Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Carlson Marketing Worldwide, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.carlsonmarketing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23542994610010796811365831394576054092150782879774600060957905640036471308510279801654779051881712201935971314122334614432858592859857526982570846431670212559635277996230569251087991114281630756478026700552415343896373088867422417192203517771704073410692935317513431336890193111455871754968407674620191403559927423476837017548611433958222864944189808878926773104970917903845574541633268561450550395109942600279090018998788646948431846891955474256346534031008127222607429800279293427175609814160658193397384542624442917665212811008519905392073506725717366969286006842062055049521964380112940863986486254868084728747813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8006fc1fa0d88c1e23e757781613ee5170efed6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlsonmarketing.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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