secure-usea2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:8f:7a:8f:bc:4b:ae:1b:99:b1:7c:04:1c:41:c4:2b was issued on by DigiCert Inc.

With 118 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:8f:7a:8f:bc:4b:ae:1b:99:b1:7c:04:1c:41:c4:2b
Serial Number (int): 12708036254708281734394970691606791211
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:7f:0b:88:71:33:9f:ce:4d:90:35:04:ff:ea:41:08:b7:e1:9b:1d
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 7a:9d:52:2e:8c:ae:fd:b3:1d:09:83:0b:48:f9:08:4c:2b:f4:da:2a
Fingerprint (sha256): e1:d9:5a:f3:a3:e0:bf:c9:8b:a6:af:3a:e1:02:d0:72:6d:a0:23:f5:c3:8b:c9:d7:f4:cf:75:be:13:ca:2a:2b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate secure-usea2-1.tessituranetwork.com

118

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-usea2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-usea2-1.tessituranetwork.com
*.tn.services
*.tnhs.cloud
t-secure-usea2-1.tessituranetwork.com
cst1.tessituranetwork.com
my.hubbardstreetdance.com
shop.slso.org
tickets.nashvillesymphony.org
cart.tpac.org
tickets.grandtheater.org
my.alysstephens.org
tickets.asf.net
cart.mnhs.org
my.austinopera.org
my.mnzoo.org
secure.countrymusichalloffame.org
tickets.thegilmore.org
my.desmoinesperformingarts.org
my.austinsymphony.org
my.balletaustin.org
my.wittemuseum.org
secure.walkerart.org
tickets.austintheatre.org
my.tulsaballet.org
my.grantparkmusicfestival.com
tickets.liedcenter.org
my.tulsasymphony.org
my.harristheaterchicago.org
ticketing.kcballet.org
my.childrenstheatre.org
orders.cocastl.org
access.fwsymphony.org
ticketing.kcrep.org
tickets.kauffmancenter.org
ticketing.wilson-center.com
experience.mcachicago.org
tickets.waltonartscenter.org
tickets.dct.org
my.dallaszoo.com
securesite.guthrietheater.org
cart.houstonsymphony.org
cart.nelson-atkins.org
my.thecarsoncenter.org
ticketing.graceland.com
tickets.overture.org
buy.amptickets.com
ticketing.opera-stl.org
tickets.kcopera.org
tickets.texasballettheater.org
tickets.kcsymphony.org
tickets.zachtheatre.org
buy.rwb.org
tickets.kcstarlight.com
My.TheSKyPAC.com
my.stagestheatre.org
my.writerstheatre.org
my.philbrook.org
my.mnopera.org
my.tuts.com
buy.fwmuseum.org
cart.broadwaytheatrecenter.com
my.theworldwar.org
my.thehermitage.com
my.hnoc.org
billetterie.droitsdelapersonne.ca
ticketing.humanrights.ca
my.oxfordpac.org
my.thehobbycenter.org
my.desmoinesartcenter.org
my.dallastheatercenter.org
members.kera.org
my.thinkeryaustin.org
tickets.wrightwood659.org
secure.kimbellart.org
tix.theatre2.org
my.gilcrease.org
my.wso.ca
cart.ticketomaha.com
my.jazzstl.org
order.cso.org
tickets.crystalbridges-themomentary.org
my.mfah.org
tickets.milwaukeerep.com
tickets.royalmtc.ca
my.thelongcenter.org
tickets.hjseries.org
secure.hbg.org
secure.dallasopera.org
secure.dallassymphony.org
secure.firststage.org
my.smm.org
my.oklahomacontemporary.org
ticket.artsiowa.com
my.noma.org
cart.joffrey.org
secure.tulsapac.com
my.arkmfa.org
tickets.winnipegfringe.com
my.goodmantheatre.org
secure.missouribotanicalgarden.org
mytickets.auditoriumtheatre.org
cart.alleytheatre.org
secure.athenaeumcenter.org
pacetickets.tulsacc.edu
secure.americansongarchives.org
my.amazeum.org
my.luminaryartscenter.com
my.milwaukeeballet.org
secure.casamanana.org
cart.steppenwolf.org
my.pritzkermilitary.org
my.hmns.org
my.houstongrandopera.org
my.music.rice.edu
secure.tulsaopera.com
visit.civilrightsmuseum.org
secure.attpac.org
secure.reddirtrelieffund.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-usea2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCFn9F5wKPekzXpYHmye
cir5IXkYuFVPmd57ACx7eoyIRRD6tzgY4omZGWY7faKQ385/ojG8vKGiS72MEUOz
dXNDECO9nUNlVwV33PzGyY3WpFuv9jNbha8dlbRpcugIxV8QIwBaCkNUxfEzKPCw
yB3P+NXg0kuedqp0Tp8aOlzpZf0Sw9oVnuuh0ZgiCpf39OhG8Apzn3Vr5++hl/X6
ebtTq5fj1zTK4zC6o7DYo0SYHY3DlcH1vVpmtdQuwhrg08uXrrJE5C8ggSMmvKD8
zQgEXq1+grNha+dM9QIygOviN9twRhO5EM90T/z3j7rQplBF2boY7xEJYBWPRZQV
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12708036254708281734394970691606791211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23749274481942996030446237201282378340091388701209683835055876368677961416515345809944070465441298420917242202043796368471005482243234701578485190582838556046355136273565244628052206841275340834197373443552569900479309979697484456036882890787069274940711216890104270276118423663898646678980344360559485448312510019405125421726857013432226848118323592405163902956265469775076970200073245400441313176609474629294858332061453320493095865603497843566794747424453038131980080153312967581255334577937634712803947658294631357366735994990132940456521196055702455329740243072533475652834042472734711001904099762902267218629901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e7f0b8871339fce4d903504ffea4108b7e19b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2717 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-usea2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hubbardstreetdance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.slso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.nashvillesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.tpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.grandtheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.alysstephens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.asf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.mnhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.countrymusichalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thegilmore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesperformingarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.austinsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.balletaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wittemuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.walkerart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.austintheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsaballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.grantparkmusicfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.liedcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tulsasymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.harristheaterchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.childrenstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.cocastl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.fwsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.kcrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kauffmancenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.wilson-center.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.mcachicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.waltonartscenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.dct.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallaszoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.guthrietheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.houstonsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.nelson-atkins.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thecarsoncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.graceland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.overture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.amptickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.opera-stl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.texasballettheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.zachtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.rwb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.kcstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'My.TheSKyPAC.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stagestheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.writerstheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.philbrook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mnopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.tuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.fwmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.broadwaytheatrecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theworldwar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehermitage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hnoc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billetterie.droitsdelapersonne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.humanrights.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oxfordpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thehobbycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.desmoinesartcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.dallastheatercenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.kera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thinkeryaustin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.wrightwood659.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.kimbellart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tix.theatre2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.gilcrease.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.wso.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.ticketomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jazzstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.cso.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.crystalbridges-themomentary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mfah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.milwaukeerep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.royalmtc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.thelongcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hjseries.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hbg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallasopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.dallassymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.firststage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.smm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.oklahomacontemporary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.artsiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.noma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.joffrey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tulsapac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.arkmfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.winnipegfringe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.goodmantheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.missouribotanicalgarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytickets.auditoriumtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.alleytheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.athenaeumcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacetickets.tulsacc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.americansongarchives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.amazeum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.luminaryartscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.milwaukeeballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.casamanana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.steppenwolf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pritzkermilitary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.hmns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.houstongrandopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.music.rice.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tulsaopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.civilrightsmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.attpac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.reddirtrelieffund.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea11d1e8600000403004630440220068210c9ad464c2cd6b77d1962fca10423f697f5e8840b5e43bd9f82214fa7ae02207f2a611d87cd9108fb78ffb5cb961b7d936923de9b241579b44e7cccf218688400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea11d1ebf0000040300483046022100fc49aa0e44f09c7cf1772cf7a094e85003bf02cd1c23c9fc70ee5347d500561f022100cd68b8d6c434fdcd96ca8ed9420c7e0f525ac562ce0ff741f40373ae256df474007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ea11d1e9b00000403004730450221008ff4c9b585b9e22c164a155802b3d10aa5cf30b3d4fe197fd2482f5bb073eb5102204cb1d8c3d7efdc9dc4c59d63d48096e4f3336f1e8e8ac61c719d2c08a6e52b40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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