exl.carlsonmarketing.com
- Carlson Marketing Worldwide Inc -
Issued by USERTrust Legacy Secure Server CA
About this certificate
This digital certificate with serial number 48:9e:90:db:7c:92:03:5c:11:76:0f:16:a0:d0:ed:de was issued on by The USERTRUST Network.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
Carlson Marketing Worldwide Inc
Organization:
Carlson Marketing Worldwide Inc
Organization unit: PlatinumSSL
Organization unit: Hosted by Carlson Marketing Worldwide, Inc.
Organization unit: Comodo Unified Communications
Organization unit: PlatinumSSL
Organization unit: Hosted by Carlson Marketing Worldwide, Inc.
Organization unit: Comodo Unified Communications
Address:
Suite 150
Address: 1405 Xenium Lane N.
Postal code: 55441
State / Province: MN
Locality: Plymouth
Country: US
Address: 1405 Xenium Lane N.
Postal code: 55441
State / Province: MN
Locality: Plymouth
Country: US
The USERTRUST Network
Organization:
The USERTRUST Network
State / Province:
UT
Locality: Salt Lake City
Country: US
Locality: Salt Lake City
Country: US
This certificate has expire since
Certificate Details
Serial Number (hex): 48:9e:90:db:7c:92:03:5c:11:76:0f:16:a0:d0:ed:deSerial Number (int): 96527736656665622331781545657864613342
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: a7:f6:2f:f2:a6:17:87:10:db:e5:b9:57:9b:3a:76:33:07:3d:6e:24
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16
Fingerprint (sha1): 8f:99:f5:f8:42:7e:f3:9e:bb:3b:14:15:91:28:b3:07:eb:94:7b:73
Fingerprint (sha256): df:82:7c:a9:15:2b:14:bb:62:30:8d:dd:64:50:cf:5b:8c:58:12:c4:0a:21:d0:75:34:9b:c7:d4:d2:bc:84:32
Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl
Check the revocation status for certificate exl.carlsonmarketing.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for exl.carlsonmarketing.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
exl.carlsonmarketing.com
www.exl.carlsonmarketing.com
www.exl.carlsonmarketing.com
Other certificates including the domain name carlsonmarketing.com
(limited to 100 certificates)
www.carlsonmarketing.com
digitalvault.carlsonmarketing.com
exl.demo.us.aimia.com
www.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
portal-qa.loyaltyops.carlsonmarketing.com
matrixcsrus-qa.carlsonmarketing.com
qa.merialrewardsclinicprogram.carlsonmarketing.com
us.aimia.com
portal.loyaltyops.carlsonmarketing.com
fusionTVR-qaua.us.aimia.com
merialrewardsplusclinic-qa.carlsonmarketing.com
fusiontvr.carlsonmarketing.com
us.aimia.com
clientreporting.carlsonmarketing.com
themix.us.aimia.com
fusiontvr-qaua.carlsonmarketing.com
merchwebadmin.carlsonmarketing.com
Carlsonmarketing.com
q17rptu.carlsonmarketing.com
digitalvault.us.aimia.com
gpsadmin-qa.carlsonmarketing.com
Carlsonmarketing.com
merialclinicprograms-qa.carlsonmarketing.com
membertvr-qa.carlsonmarketing.com
merialrewardsplus-qa.us.aimia.com
merialrewardsplusclinic-qa.us.aimia.com
p17rptu.carlsonmarketing.com
wsgateway.com
fusionTVR-qa.us.aimia.com
carlsonmarketing.com
www.carlsonmarketing.com
cca.carlsonmarketing.com
secure-edev-dev.carlsonmarketing.com
wsgateway.carlsonmarketing.com
digitalvault-qa.carlsonmarketing.com
exl.qa.carlsonmarketing.com
mycardlink-qa.us.aimia.com
merchwebadmin-qa.carlsonmarketing.com
swebstats.carlsonmarketing.com
membertvr-qaua.us.aimia.com
Carlsonmarketing.com
merialrewards-qa.carlsonmarketing.com
exl.demo.carlsonmarketing.com
exlreports.carlsonmarketing.com
fusiontvr-dev.carlsonmarketing.com
fusiontvr-qa.carlsonmarketing.com
cis.carlsonmarketing.com
membertvr-qaua.carlsonmarketing.com
secure-edev.carlsonmarketing.com
mycardlinksite-qa.carlsonmarketing.com
myglobalcard-qa.carlsonmarketing.com
entiera-report-qa.carlsonmarketing.com
gpsadmin-qa.us.aimia.com
merialrewardsclinicprogram-qa.us.aimia.com
merialrewardsplus-qa.carlsonmarketing.com
mycccoupon-qa.carlsonmarketing.com
clientreporting-qa.aimia.com
exlreports-qa.aimia.com
myCCCoupon-qa.us.aimia.com
www.carlsonmarketing.com
Carlsonmarketing.com
myglobalcardsite-qa.carlsonmarketing.com
merialclientconnectionplus-qa.carlsonmarketing.com
*.qa.carlsonmarketing.com
exl.carlsonmarketing.com
merialclientconnection-qa.carlsonmarketing.com
secure-ede.carlsonmarketing.com
exl.dev.carlsonmarketing.com
d17rptu.carlsonmarketing.com
clientreporting-qa.carlsonmarketing.com
matrixcsrus.carlsonmarketing.com
cca-qa.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
exl.us.aimia.com
digitalvault.carlsonmarketing.com
exl.demo.us.aimia.com
www.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
portal-qa.loyaltyops.carlsonmarketing.com
matrixcsrus-qa.carlsonmarketing.com
qa.merialrewardsclinicprogram.carlsonmarketing.com
us.aimia.com
portal.loyaltyops.carlsonmarketing.com
fusionTVR-qaua.us.aimia.com
merialrewardsplusclinic-qa.carlsonmarketing.com
fusiontvr.carlsonmarketing.com
us.aimia.com
clientreporting.carlsonmarketing.com
themix.us.aimia.com
fusiontvr-qaua.carlsonmarketing.com
merchwebadmin.carlsonmarketing.com
Carlsonmarketing.com
q17rptu.carlsonmarketing.com
digitalvault.us.aimia.com
gpsadmin-qa.carlsonmarketing.com
Carlsonmarketing.com
merialclinicprograms-qa.carlsonmarketing.com
membertvr-qa.carlsonmarketing.com
merialrewardsplus-qa.us.aimia.com
merialrewardsplusclinic-qa.us.aimia.com
p17rptu.carlsonmarketing.com
wsgateway.com
fusionTVR-qa.us.aimia.com
carlsonmarketing.com
www.carlsonmarketing.com
cca.carlsonmarketing.com
secure-edev-dev.carlsonmarketing.com
wsgateway.carlsonmarketing.com
digitalvault-qa.carlsonmarketing.com
exl.qa.carlsonmarketing.com
mycardlink-qa.us.aimia.com
merchwebadmin-qa.carlsonmarketing.com
swebstats.carlsonmarketing.com
membertvr-qaua.us.aimia.com
Carlsonmarketing.com
merialrewards-qa.carlsonmarketing.com
exl.demo.carlsonmarketing.com
exlreports.carlsonmarketing.com
fusiontvr-dev.carlsonmarketing.com
fusiontvr-qa.carlsonmarketing.com
cis.carlsonmarketing.com
membertvr-qaua.carlsonmarketing.com
secure-edev.carlsonmarketing.com
mycardlinksite-qa.carlsonmarketing.com
myglobalcard-qa.carlsonmarketing.com
entiera-report-qa.carlsonmarketing.com
gpsadmin-qa.us.aimia.com
merialrewardsclinicprogram-qa.us.aimia.com
merialrewardsplus-qa.carlsonmarketing.com
mycccoupon-qa.carlsonmarketing.com
clientreporting-qa.aimia.com
exlreports-qa.aimia.com
myCCCoupon-qa.us.aimia.com
www.carlsonmarketing.com
Carlsonmarketing.com
myglobalcardsite-qa.carlsonmarketing.com
merialclientconnectionplus-qa.carlsonmarketing.com
*.qa.carlsonmarketing.com
exl.carlsonmarketing.com
merialclientconnection-qa.carlsonmarketing.com
secure-ede.carlsonmarketing.com
exl.dev.carlsonmarketing.com
d17rptu.carlsonmarketing.com
clientreporting-qa.carlsonmarketing.com
matrixcsrus.carlsonmarketing.com
cca-qa.carlsonmarketing.com
wsgateway-qa.carlsonmarketing.com
exl.us.aimia.com
Certificate
The complete raw certificate details for exl.carlsonmarketing.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGETCCBPmgAwIBAgIQSJ6Q23ySA1wRdg8WoNDt3jANBgkqhkiG9w0BAQUFADB/ MQswCQYDVQQGEwJVUzELMAkGA1UECBMCVVQxFzAVBgNVBAcTDlNhbHQgTGFrZSBD aXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxKjAoBgNVBAMTIVVT RVJUcnVzdCBMZWdhY3kgU2VjdXJlIFNlcnZlciBDQTAeFw0xMTAyMjIwMDAwMDBa Fw0xMzAyMjEyMzU5NTlaMIIBMDELMAkGA1UEBhMCVVMxDjAMBgNVBBETBTU1NDQx MQswCQYDVQQIEwJNTjERMA8GA1UEBxMIUGx5bW91dGgxEjAQBgNVBAkTCVN1aXRl IDE1MDEcMBoGA1UECRMTMTQwNSBYZW5pdW0gTGFuZSBOLjEoMCYGA1UEChMfQ2Fy bHNvbiBNYXJrZXRpbmcgV29ybGR3aWRlIEluYzEUMBIGA1UECxMLUGxhdGludW1T U0wxNDAyBgNVBAsTK0hvc3RlZCBieSBDYXJsc29uIE1hcmtldGluZyBXb3JsZHdp ZGUsIEluYy4xJjAkBgNVBAsTHUNvbW9kbyBVbmlmaWVkIENvbW11bmljYXRpb25z MSEwHwYDVQQDExhleGwuY2FybHNvbm1hcmtldGluZy5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCmC8eulVCa43VHL0cWMxaFD5rDC6/Peq82YzgQ i+wWAo5cFLaflpkdTCMPsuf25VxRnLSOn9ZJCXkO0oqSuYj+sr4l7feePDD1LNOS ZSvrlPkC73zewqn8TAkGd4ZNovRtxCrq7K+r8y7ux2ia8XmoRL2ampZYpIXlAM5s RFy+/qAUsopdaPbg/Qc5uHEQLq5ap0Zk+St9SS5j7YK0rR8PUCj1rLg5lNikfdDQ uNDL6ReP/EcwVlF2c6LLIgGDIYo9NIzDroalCy0s65ZT4QGdOE9p7rB2tmEBjpen R1Ko+gcVRaJBcQRXcaKNrt4bv0nSjyo6Yuzhox5w39rXbLSNAgMBAAGjggHUMIIB 0DAfBgNVHSMEGDAWgBSvpECvnxb+qzH9+9WXi/WRoySGFjAdBgNVHQ4EFgQUp/Yv 8qYXhxDb5blXmzp2Mwc9biQwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEIGA1UdIAQ7MDkwNwYMKwYB BAGyMQECAQMEMCcwJQYIKwYBBQUHAgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5j b20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybC51c2VydHJ1c3QuY29tL1VT RVJUcnVzdExlZ2FjeVNlY3VyZVNlcnZlckNBLmNybDB9BggrBgEFBQcBAQRxMG8w RgYIKwYBBQUHMAKGOmh0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RM ZWdhY3lTZWN1cmVTZXJ2ZXJDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3Nw LnVzZXJ0cnVzdC5jb20wQQYDVR0RBDowOIIYZXhsLmNhcmxzb25tYXJrZXRpbmcu Y29tghx3d3cuZXhsLmNhcmxzb25tYXJrZXRpbmcuY29tMA0GCSqGSIb3DQEBBQUA A4IBAQBNPlp862NQblexOZpdUzlWZBI5uVVCg5E2beyxXyltnP9Cobo6GtNscFfh oNwXVRlH5JCrFWycEzK6kjeRfOoQQMhiCG7Cntc1YISRHkFwAfxtx3L13nFTrnJp ZEXFlG6yGABf+0oOFNZ53LuFdMEPGtv1I/dm8AoAsMV4oWDaDPXOVagWLhs870mi o0zbPvqqAI1/YsU16byPgLTmyZMDek6BoxSXh09b97AuSIFjP4rIQDnhGdYbq9Ns N2tlZKZknhLv3UsGOaaEm8zdYU93eaMTf4+An3ZC9QMJ2Hbwc8XTBZRUBKpvcVuA +RkZ2WZBAieAvTTdyo+4Ya8fZE3q -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgvHrpVQmuN1Ry9HFjMW hQ+awwuvz3qvNmM4EIvsFgKOXBS2n5aZHUwjD7Ln9uVcUZy0jp/WSQl5DtKKkrmI /rK+Je33njww9SzTkmUr65T5Au983sKp/EwJBneGTaL0bcQq6uyvq/Mu7sdomvF5 qES9mpqWWKSF5QDObERcvv6gFLKKXWj24P0HObhxEC6uWqdGZPkrfUkuY+2CtK0f D1Ao9ay4OZTYpH3Q0LjQy+kXj/xHMFZRdnOiyyIBgyGKPTSMw66GpQstLOuWU+EB nThPae6wdrZhAY6Xp0dSqPoHFUWiQXEEV3Gija7eG79J0o8qOmLs4aMecN/a12y0 jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 96527736656665622331781545657864613342 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55441' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plymouth' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Suite 150' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1405 Xenium Lane N.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carlson Marketing Worldwide Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Carlson Marketing Worldwide, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comodo Unified Communications' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exl.carlsonmarketing.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20961367562654418177222911494649847670991631746323164523355633047359564475513809110373562247072814227512830492452762048169294897799147784142608836864115570410804049033127279925687954804527517588058299011323690151019470412720684292566373146049677208008089006849371548374558229470274515616362204938144965777939544416775495384368737508186263443148521555825874805841895634554599271855163891407144180707445456276890108387658626996878081052517684973966459772631664115922010197648132284011769845464213630962883744948620607711797949747237383919004868647969309262228160691323643649073042791037182583833882294200658084070470797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a7f62ff2a6178710dbe5b9579b3a7633073d6e24 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exl.carlsonmarketing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exl.carlsonmarketing.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004d3e5a7ceb63506e57b1399a5d533956641239b955428391366decb15f296d9cff42a1ba3a1ad36c7057e1a0dc17551947e490ab156c9c1332ba9237917cea1040c862086ec29ed7356084911e417001fc6dc772f5de7153ae72696445c5946eb218005ffb4a0e14d679dcbb8574c10f1adbf523f766f00a00b0c578a160da0cf5ce55a8162e1b3cef49a2a34cdb3efaaa008d7f62c535e9bc8f80b4e6c993037a4e81a31497874f5bf7b02e4881633f8ac84039e119d61babd36c376b6564a6649e12efdd4b0639a6849bccdd614f7779a3137f8f809f7642f50309d876f073c5d305945404aa6f715b80f91919d96641022780bd34ddca8fb861af1f644dea