exl.carlsonmarketing.com

- Carlson Marketing Worldwide Inc -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 48:9e:90:db:7c:92:03:5c:11:76:0f:16:a0:d0:ed:de was issued on by The USERTRUST Network.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Carlson Marketing Worldwide Inc

Organization: Carlson Marketing Worldwide Inc
Organization unit: PlatinumSSL
Organization unit: Hosted by Carlson Marketing Worldwide, Inc.
Organization unit: Comodo Unified Communications
Address: Suite 150
Address: 1405 Xenium Lane N.
Postal code: 55441
State / Province: MN
Locality: Plymouth
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:9e:90:db:7c:92:03:5c:11:76:0f:16:a0:d0:ed:de
Serial Number (int): 96527736656665622331781545657864613342
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a7:f6:2f:f2:a6:17:87:10:db:e5:b9:57:9b:3a:76:33:07:3d:6e:24
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 8f:99:f5:f8:42:7e:f3:9e:bb:3b:14:15:91:28:b3:07:eb:94:7b:73
Fingerprint (sha256): df:82:7c:a9:15:2b:14:bb:62:30:8d:dd:64:50:cf:5b:8c:58:12:c4:0a:21:d0:75:34:9b:c7:d4:d2:bc:84:32

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate exl.carlsonmarketing.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exl.carlsonmarketing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exl.carlsonmarketing.com
www.exl.carlsonmarketing.com

Other certificates including the domain name carlsonmarketing.com

(limited to 100 certificates)
www.carlsonmarketing.com
digitalvault.carlsonmarketing.com
exl.demo.us.aimia.com
www.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
portal-qa.loyaltyops.carlsonmarketing.com
matrixcsrus-qa.carlsonmarketing.com
qa.merialrewardsclinicprogram.carlsonmarketing.com
us.aimia.com
portal.loyaltyops.carlsonmarketing.com
fusionTVR-qaua.us.aimia.com
merialrewardsplusclinic-qa.carlsonmarketing.com
fusiontvr.carlsonmarketing.com
us.aimia.com
clientreporting.carlsonmarketing.com
themix.us.aimia.com
fusiontvr-qaua.carlsonmarketing.com
merchwebadmin.carlsonmarketing.com
Carlsonmarketing.com
q17rptu.carlsonmarketing.com
digitalvault.us.aimia.com
gpsadmin-qa.carlsonmarketing.com
Carlsonmarketing.com
merialclinicprograms-qa.carlsonmarketing.com
membertvr-qa.carlsonmarketing.com
merialrewardsplus-qa.us.aimia.com
merialrewardsplusclinic-qa.us.aimia.com
p17rptu.carlsonmarketing.com
wsgateway.com
fusionTVR-qa.us.aimia.com
carlsonmarketing.com
www.carlsonmarketing.com
cca.carlsonmarketing.com
secure-edev-dev.carlsonmarketing.com
wsgateway.carlsonmarketing.com
digitalvault-qa.carlsonmarketing.com
exl.qa.carlsonmarketing.com
mycardlink-qa.us.aimia.com
merchwebadmin-qa.carlsonmarketing.com
swebstats.carlsonmarketing.com
membertvr-qaua.us.aimia.com
Carlsonmarketing.com
merialrewards-qa.carlsonmarketing.com
exl.demo.carlsonmarketing.com
exlreports.carlsonmarketing.com
fusiontvr-dev.carlsonmarketing.com
fusiontvr-qa.carlsonmarketing.com
cis.carlsonmarketing.com
membertvr-qaua.carlsonmarketing.com
secure-edev.carlsonmarketing.com
mycardlinksite-qa.carlsonmarketing.com
myglobalcard-qa.carlsonmarketing.com
entiera-report-qa.carlsonmarketing.com
gpsadmin-qa.us.aimia.com
merialrewardsclinicprogram-qa.us.aimia.com
merialrewardsplus-qa.carlsonmarketing.com
mycccoupon-qa.carlsonmarketing.com
clientreporting-qa.aimia.com
exlreports-qa.aimia.com
myCCCoupon-qa.us.aimia.com
www.carlsonmarketing.com
Carlsonmarketing.com
myglobalcardsite-qa.carlsonmarketing.com
merialclientconnectionplus-qa.carlsonmarketing.com
*.qa.carlsonmarketing.com
exl.carlsonmarketing.com
merialclientconnection-qa.carlsonmarketing.com
secure-ede.carlsonmarketing.com
exl.dev.carlsonmarketing.com
d17rptu.carlsonmarketing.com
clientreporting-qa.carlsonmarketing.com
matrixcsrus.carlsonmarketing.com
cca-qa.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
exl.us.aimia.com

Certificate

The complete raw certificate details for exl.carlsonmarketing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgvHrpVQmuN1Ry9HFjMW
hQ+awwuvz3qvNmM4EIvsFgKOXBS2n5aZHUwjD7Ln9uVcUZy0jp/WSQl5DtKKkrmI
/rK+Je33njww9SzTkmUr65T5Au983sKp/EwJBneGTaL0bcQq6uyvq/Mu7sdomvF5
qES9mpqWWKSF5QDObERcvv6gFLKKXWj24P0HObhxEC6uWqdGZPkrfUkuY+2CtK0f
D1Ao9ay4OZTYpH3Q0LjQy+kXj/xHMFZRdnOiyyIBgyGKPTSMw66GpQstLOuWU+EB
nThPae6wdrZhAY6Xp0dSqPoHFUWiQXEEV3Gija7eG79J0o8qOmLs4aMecN/a12y0
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96527736656665622331781545657864613342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55441'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suite 150'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1405 Xenium Lane N.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlson Marketing Worldwide Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Carlson Marketing Worldwide, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exl.carlsonmarketing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20961367562654418177222911494649847670991631746323164523355633047359564475513809110373562247072814227512830492452762048169294897799147784142608836864115570410804049033127279925687954804527517588058299011323690151019470412720684292566373146049677208008089006849371548374558229470274515616362204938144965777939544416775495384368737508186263443148521555825874805841895634554599271855163891407144180707445456276890108387658626996878081052517684973966459772631664115922010197648132284011769845464213630962883744948620607711797949747237383919004868647969309262228160691323643649073042791037182583833882294200658084070470797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7f62ff2a6178710dbe5b9579b3a7633073d6e24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exl.carlsonmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exl.carlsonmarketing.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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