san-15-s50.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:3d:5b:17:d5:dc:d5:23:ab:fa:98:ab:05:0f:25:16 was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:3d:5b:17:d5:dc:d5:23:ab:fa:98:ab:05:0f:25:16
Serial Number (int): 8293945670789067147202543545175975190
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 43:1c:c5:e5:c0:30:6f:71:56:c5:12:b3:87:c6:a3:74:87:76:b1:02
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e4:be:f5:c7:d0:87:90:24:64:6c:5f:e2:b1:d9:33:11:9b:38:5b:82
Fingerprint (sha256): df:e3:b6:c8:92:6c:c7:6e:ed:54:cb:61:fd:0b:3e:70:f5:a1:11:0a:06:48:3d:93:47:ed:45:2b:ca:9f:e3:1b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-15-s50.tlsprovisioning.exacttarget.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-15-s50.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-15-s50.tlsprovisioning.exacttarget.com
image.alicepizza.pizza
image.allerganaesthetics.co.th
image.allerganaesthetics.pl
image.allerganaestheticsgulf.com
image.br.gskpro.com
image.business.dein-sky.de
image.c.drops.online
image.chemetall-marketing.basf.com
image.club.relxwithme.com
image.clubid.relx-i.com
image.clubmy.i-relx.com
image.clubph.relxnews.com
image.communication.audi.co.za
image.communication.beneteau-group.com
image.communication.catamarans-lagoon.com
image.communication.excess-catamarans.com
image.communication.hamiltonwatch.com
image.communication.vw.co.za
image.communication.vwcv.co.za
image.community.rtr.ch
image.community.rts.ch
image.comunicacion.clubby.es
image.comunicacion.lavozdeaviles.es
image.concierge.sodexo.com
image.contact.colmar.it
image.contact.mobilize-fs.fr
image.content.greygoose.com
image.content.martini.com
image.cornmarketgroup.ie
image.descubre.aramon.com
image.e.dyson.co.jp
image.e.dyson.co.kr
image.e.dyson.co.nz
image.e.dyson.com.au
image.e.dyson.pl
image.e.rarefindsresorts.com
image.e-crimecongress.com
image.eg.mercedes-benz.com.eg
image.email.ballerette.com
image.email.cetaphil.com.br
image.email.dentaglobal.com
image.email.lorealprofessionalproducts.com
image.email.maxi.rs
image.email.mayfairworktops.co.uk
image.email.moving.click
image.email.onlinesim.it
image.email.pmiopen.com
image.email.pwc.se
image.email.rcdespanyol.com
image.email.rejmesbil.se
image.email.unisport.es
image.email.usm.com
image.india.gskpro.com
image.info.fundacion-sm.com
image.info.meinreemtsma.de
image.info.mondragon.edu
image.info.ottobock.com
image.info.wastemanaged.co.uk
image.infos.intencial.fr
image.loans.gemfinance.co.nz
image.lp.audi.pt
image.lp.cupraofficial.pt
image.lp.seat.pt
image.lp.skoda.pt
image.mail.cile.be
image.mail.danone.com.br
image.mail.expomobilia.com
image.mail.lorealactivecosmetics.com
image.mail.nestlehealthscience-me.com
image.mail.vanhartelingsma.nl
image.marketing.shekelgroup.co.il
image.mc.habyt.com
image.mc.manstein.at
image.mkt.newsspot.com.br
image.mktg.gianvitorossi.com
image.moda.citymoda.it
image.mondoconvenienza.eu
image.mueller.cewe-fotoservice.at
image.mueller-fotoservice.cewe.de
image.news.qa.basf.com
image.news.scarpamondo.it
image.park-enews.com
image.partenaire.generali.fr
image.propstack.de
image.rsmsg.randstad.com
image.s50-delegated-test.sfmc-tlsprovisioning.com
image.sfmc.europeia.pt
image.smithoptics-email.com
image.weare.delirium.ro
image.web.stellantis.com
image.your.ch.genesis.com
image.your.de.genesis.com
image.your.uk.genesis.com

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-15-s50.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2UOhlXDyOat7uyF8ZeT
pIZd0HD6GtDNggUa6C3TQ1HzPwnjoPL++v608wEWXkh0pfRKOq8WAyojfguRdzcA
uO6CDmSoYOVVB/D5K9ZteSJ0uVivPtt7dAp/6Yd+MtiKe6n0DIyvfvXpzop3vn0u
Tv+SpeAxZgOygnyibNo9Wjzg0Lg9XbKEoYny4LZFLL8KmzqQQ0bzvemvr3nzTK28
4KsBfDqsOBi/oKgdc4va9BbhcU4ehzD5dJqKu7Dbo8QkjJN9/lh2m9j4qi2sbEei
xAd4igfffKAKA092Ki/KrD7HVB+7aTfCHWuoJPAjbOhV5NZap42zNLuYzAyv/dGV
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8293945670789067147202543545175975190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-15-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24161349182973656886898843833764587287953320769490683838570945363504034794291737790607090199435395417769365389473435660707477374356577978537912287506174715941313750036819257932418979371427819745547407792555715787262255031121609615584237863831217035481063641207655529380486588157506293125707898902419507688662804866659342351934239307737280180716184981037193841565139894805148152668951844366505419564380689209002125773617642602398286347745276241273653241551429753055217416205493232189718626754048134784401312906959118403714506594506910736602497802259769173058287782703003736942234532221345231822952736334119388587333093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							431cc5e5c0306f7156c512b387c6a3748776b102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-15-s50.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.alicepizza.pizza'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaesthetics.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaesthetics.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.allerganaestheticsgulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.br.gskpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.business.dein-sky.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.c.drops.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.chemetall-marketing.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.club.relxwithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubid.relx-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubmy.i-relx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.clubph.relxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.audi.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.beneteau-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.catamarans-lagoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.excess-catamarans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.hamiltonwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.vw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communication.vwcv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.rtr.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.community.rts.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.clubby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacion.lavozdeaviles.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.concierge.sodexo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.colmar.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.mobilize-fs.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.greygoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.content.martini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cornmarketgroup.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.descubre.aramon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.dyson.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.rarefindsresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e-crimecongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.eg.mercedes-benz.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.ballerette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cetaphil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.dentaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.lorealprofessionalproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.maxi.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mayfairworktops.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.moving.click'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.onlinesim.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pmiopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pwc.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rcdespanyol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.rejmesbil.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.unisport.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.usm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.india.gskpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.fundacion-sm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.meinreemtsma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.mondragon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.ottobock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.wastemanaged.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.infos.intencial.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.loans.gemfinance.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.audi.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.cupraofficial.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.seat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lp.skoda.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.cile.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.danone.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.expomobilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lorealactivecosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.nestlehealthscience-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.vanhartelingsma.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.shekelgroup.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.habyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.manstein.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.newsspot.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.gianvitorossi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.moda.citymoda.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mondoconvenienza.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mueller.cewe-fotoservice.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mueller-fotoservice.cewe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.qa.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.scarpamondo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.park-enews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.partenaire.generali.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.propstack.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rsmsg.randstad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.s50-delegated-test.sfmc-tlsprovisioning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.europeia.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.smithoptics-email.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.weare.delirium.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.web.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.ch.genesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.de.genesis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.your.uk.genesis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f3eb6bc49d80af08b172f49f3dce85cf00fb826c6086623c5aa73dc38e79ba4fc57d0c61c5ebdc6cce287d5ee1e7ad5657ae79eb37aeede5e5f3c91f208c88bc9350df95226ceea61498df2177a9907856e7b4b61c882691cb13dd677a89aa09b5dc34c5df2bd3b99dc90c2e879b95e5ecbe8005c2ec6c1af0681b00536bac0e53e018b1fc1ba25a212e2e49d0aa656c687abf413f238b5861208b138b626c6ad34fe1e930061d2a0111a84b0378fc7f75ca13ca27585e29e232f201eb4acb9440e958e288cc3534346e70dd36797fb9e020faf389bf96c7a9c295263718b1ad1de5b6da9009175195751e1a27bd587f3dddf61efcad2bcc6d93cf4e4f82bdd