san-2-s12.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G3 TLS ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 04:9f:db:e9:95:07:60:82:54:58:b7:5a:e0:0f:c9:1d was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9f:db:e9:95:07:60:82:54:58:b7:5a:e0:0f:c9:1d
Serial Number (int): 6146947537633951319419692911707539741
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fd:ca:8e:ea:f3:8b:a4:0f:16:14:0f:3a:e2:e7:7c:e7:ad:86:b2:c8
AuthorityKeyId: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (sha1): 95:bf:e6:f5:5d:7a:bb:d2:99:00:e6:5d:97:cb:1b:99:e8:90:d7:e2
Fingerprint (sha256): de:ff:7d:da:41:81:85:46:c1:f1:f5:04:2c:5c:1c:35:4e:ef:e7:55:5a:7d:c7:08:d6:10:bb:08:75:00:57:b7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate san-2-s12.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-2-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-2-s12.tlsprovisioning.exacttarget.com
image.1.amaliearena.com
image.1.theidentitytb.com
image.ad.hoadbrand.com
image.and.obplbrand.com
image.celeritech.site
image.comerciosepa.com
image.comms.cardworks.co.nz
image.comms.education.nsw.gov.au
image.comms.opalhealthcare.com.au
image.comms.sharks.com.au
image.connect.csun.edu
image.content.carenethealthcare.com
image.crm.monexonow.com
image.e.advantaclean.com
image.e.afl.com.au
image.e.appliedtherapeutics.com
image.e.atmosphere.tv
image.e.boisestate.edu
image.e.budgetblinds.com
image.e.cbb-bank.com
image.e.concretecraft.com
image.e.davidyurman.com
image.e.fleetpride.com
image.e.lucidmotors.com
image.e.marvelstadium.com.au
image.e.ondeck.com.au
image.e.panthers.com
image.e.tailoredliving.com
image.edm.mecca.com
image.email.branchenergy.com
image.email.flexiti.com
image.email.guideline.com
image.email.motoclub.io
image.email.mydoublecheck.com
image.email.pentegra.com
image.email.rare.org
image.email.roadex.com
image.email.themmrf.org
image.email.vuele.io
image.email.yohana.com
image.email.zytara.com
image.emessage.wccucreditunion.coop
image.engage-us.novartis.com
image.go.ccc.edu
image.gs.hyundai.com
image.hallfirst.com
image.hamkt.com.br
image.hello.activata.co.nz
image.hello.estheticscenter.com
image.hello.organigram.ca
image.hello.teachable.com
image.home.slyp.com.au
image.info.getaroommarketing.com
image.info.tapcheck.com
image.infolatorre.com
image.ma.hellocycling.jp
image.ma.menicon.co.jp
image.ma.tohogas.co.jp
image.mail.c-designarchitects.com
image.mail.fite.tv
image.mail.foodja.com
image.mail.fukufuku-honpo.com
image.mail.nationaladvicesolutions.com
image.mail.p1fcu.org
image.mail.wearesalty.com
image.mailing.cajaarequipa.pe
image.marketing.a5corp.com
image.marketing.almagro.cl
image.marketing.pilares.cl
image.marketing.socovesa.cl
image.marketing.vionlearning.com
image.marketingsur.socovesa.cl
image.members.shiro-shiro.jp
image.merzaestheticsbrasil.com
image.merzaestheticsmexico.com
image.mkt.blue3investimentos.com.br
image.msg.adm.usc.edu
image.novidades.skinlaser.com.br
image.nursinginfo.concordia.edu
image.nursinginfo.csp.edu
image.nursinginfo.xavier.edu
image.obahortifruti.com
image.ouchi-eneos.com
image.oxxoparati.com
image.porcelanite.mx
image.procomercr.com
image.prom.galerias.com
image.prom.liverpool.com.mx
image.prom.suburbia.com.mx
image.renaissanceglobalonline.com
image.sfdc.shirahama-iot.digitalid.jp
image.solutions.nitaac.nih.gov
image.sorianacomunicacion.com
image.vinfastauto.com
image.you.absolutecosmetic.com.au

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-2-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfPTjyEEKTK9fWCqGE0w7N1WtymFR
vKLjIXnbOQ87PQKr9yv9ax0NDLvKwhgrK6gIEN3NK3G5Y44dy6CkHuUD2g==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6146947537633951319419692911707539741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-2-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047cf4e3c8410a4caf5f582a86134c3b3755adca6151bca2e32179db390f3b3d02abf72bfd6b1d0d0cbbcac2182b2ba80810ddcd2b71b9638e1dcba0a41ee503da
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdca8eeaf38ba40f16140f3ae2e77ce7ad86b2c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2630 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-2-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.1.amaliearena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.1.theidentitytb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ad.hoadbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.and.obplbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.celeritech.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comerciosepa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.cardworks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.education.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.opalhealthcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.sharks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.connect.csun.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.carenethealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.monexonow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.advantaclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.afl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.appliedtherapeutics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.atmosphere.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.boisestate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.budgetblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.cbb-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.concretecraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.davidyurman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.fleetpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.lucidmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.marvelstadium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.ondeck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.panthers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.tailoredliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.mecca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.branchenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.flexiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.guideline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.motoclub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mydoublecheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pentegra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.roadex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.themmrf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vuele.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.yohana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.zytara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emessage.wccucreditunion.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.engage-us.novartis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go.ccc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gs.hyundai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hallfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hamkt.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.activata.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.estheticscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.organigram.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.hello.teachable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.home.slyp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.getaroommarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.tapcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.infolatorre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.hellocycling.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.menicon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.tohogas.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.c-designarchitects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fite.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.foodja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.fukufuku-honpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nationaladvicesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.p1fcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.wearesalty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.cajaarequipa.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.a5corp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.almagro.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.pilares.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.socovesa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.vionlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketingsur.socovesa.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.members.shiro-shiro.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.merzaestheticsbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.merzaestheticsmexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.blue3investimentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.msg.adm.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.novidades.skinlaser.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nursinginfo.concordia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nursinginfo.csp.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nursinginfo.xavier.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.obahortifruti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ouchi-eneos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.oxxoparati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.porcelanite.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.procomercr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.prom.galerias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.prom.liverpool.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.prom.suburbia.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.renaissanceglobalonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfdc.shirahama-iot.digitalid.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.solutions.nitaac.nih.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sorianacomunicacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vinfastauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.you.absolutecosmetic.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38286433735250747727077089529827807910756407817752011728761211910100413534859856286916768675049201282934316351829016
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16282770062126261007932590225094039285647141727055817997853341114851238867900793471781834087626136298934418955896295