san-21-s12.tlsprovisioning.exacttarget.com

- SALESFORCE.COM, INC. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:58:57:3b:5f:f8:82:82:f2:94:6c:dc:58:dd:b4:c2 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SALESFORCE.COM, INC.

Organization: SALESFORCE.COM, INC.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:58:57:3b:5f:f8:82:82:f2:94:6c:dc:58:dd:b4:c2
Serial Number (int): 8434059372059171965147755416280478914
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 55:d1:6d:a5:98:cc:bb:f9:d6:24:c3:5a:91:e8:dc:cb:da:e6:c8:a1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e7:98:f7:98:90:29:86:c0:1f:80:5c:19:97:d9:f8:f7:38:b9:64:67
Fingerprint (sha256): e1:e5:c3:a1:ea:63:ba:98:53:49:00:b5:ca:3e:f1:6a:29:02:56:6d:c9:7a:bd:3b:bf:f5:e2:24:27:70:cc:cb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate san-21-s12.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-21-s12.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-21-s12.tlsprovisioning.exacttarget.com
image.youropinionpolling.com
image.victorymailings.com
image.twglobalmall-crm.com
image.sales.educationaldesignsolutions.com
image.conservativeintelalerts.com
image.buildourmovement.com
image.backingamericanow.com
image.info.nzx.com
image.email.t-mobilefiber.com
image.cccorporativo.com
image.comms.ed.exceedigital.com.au
image.homerunrewards.cstoresavings.com
image.info.innovationcarepartners.com
image.info.masslottery-communications.com
image.bluewaterrewards.cstoresavings.com
image.email.everlightsolar.com
image.email-ezanchorpuller.com
image.atlantisrewards.cstoresavings.com
image.shortstoprewards.cstoresavings.com
image.daspeweb-mkt.com
image.ma.belluna.jp
image.ma.ryuryumall.jp
image.email.frontiersawmills.com
image.emails.pbhfoundation.org
image.mktg.digicelinternational.com
image.my.oc-cf.org
image.conteudo.microtecnica.com.br
image.email.bettycrocker.com
image.email.cjfashion.com
image.email.pekininsurance.com
image.m.smile-zemi.com
image.mail.lifenet-seimei.co.jp
image.mail.ymcamemphis.org
image.mc.collage.com
image.medicareinfo.cigna.com
image.email.shine.com.au
image.comunicacao.petrobras.com.br
image.sf.nssco.com
image.customercommunications.csx.com
image.e.gmgneverrests.com
image.edu.wcei.net
image.i.leadership.deakin.edu.au
image.i.onlinenursing.holyfamily.edu
image.i.studyonline.unsw.edu.au
image.insure.marqueeig.com
image.mail2.dealersight.net
image.my.gopineapple.com
image.saintgobainconstrucao.com.br
image.sfemail.colonybank.com
image.comunicaciones.taxonera.com
image.comunicaciones.terza.com
image.destaque.unisa.com.br
image.e.gorenje.com
image.e.isufoundation.com
image.employeecomms.mta.org
image.go2.nsf.gov
image.info.cwknetwork.com
image.mailers.aisglass.com
image.mkt.santodigital.com.br
image.my.gosummer.com
image.nestle.jp
image.rewards.redbarnmkt.com
image.tauckemail.com
image.customercare.adrianasinsurance.com
image.tolucafcdata.com
image.edu.reliasacademy.com
image.edu.reliasmedia.com
image.education.freecme.com
image.education.nurse.com
image.email.mainstreet.com
image.mail.usaswimming.org
image.comunica.jeitto.com.br
image.draftkings-vip.com
image.e.reddsummit.com
image.suppliercentralcomms.coles.com.au
image.care.boystown.org
image.marketing.nomura.com
image.conteudo.dynamox.net
image.coopminutodedios.com.co
image.neoenergiabrasilia.com.br
image.neoenergiacoelba.com.br
image.neoenergiacosern.com.br
image.neoenergiaelektro.com.br
image.neoenergiapernambuco.com.br
image.blinkmail.com.br
image.contaazulempresas.com
image.crm.hmgics.com
image.edm.bcu.com.au
image.email.cuehealth.com
image.email.fuqua.duke.edu
image.mail.quicken.com
image.mc.skillsfuture.gov.sg
image.message.sandyspringbank.com
image.nuestrosparquescementerios.cl
image.rmc.ucsd.edu

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
san-9-s6.tlsprovisioning.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
members.402.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
members.s13.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
pub.s3.qa3.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
webservice.s7.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-21-s12.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsTROI9Ok5vbndazSLlY
xz6FLttHQT+mzDC98Uvi+Qd0hdsoqqtVLJ1dPkBdKxN3XvaGZXhI6p3TrsOf0xlM
nc3kMFer6VGNspdXd3Ef2B08KQI1EkJy0XbBOZJkidtMA5Zc+ZrtdPSSKt6y1iM3
9G+NYvZrwgNGKRXRDPWOr+WViLhD2112lFpOUPGD5Vlssvs3QtMZBTwzmB4FDxNp
1GkN0biI60OVy6zUpWq8gYqGnN1pgrsCPkaqUu04RBmNdFXKS3G83XHW0pGZZAlD
YUqJVdHh2xzhBBcRY/cc6RcqIpTYsOp162svunzowe1/NGwiRq0o0Y+Qusn/zx7L
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8434059372059171965147755416280478914
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SALESFORCE.COM, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-21-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23072425716566629218499706010902080067523023811110042533382173024394067572063608299386539665048331700809375875768756275769728762291075273308147515829806278173963401143407767857530232868018935356491515912428655537236691770981507691816829863726410110365110381391433979202938672361419599903545524489309072830180750466789886456561364934894895493473392806692568527399756830284129604901847324136199017578530424843380059716059696303510419935360042104936763012927060285940762645366702497108765404434808638606767657783856145854887874776185587748090117597278483527624097766069832832690149269524752004440166606686280140596366087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55d16da598ccbbf9d624c35a91e8dccbdae6c8a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-21-s12.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.youropinionpolling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.victorymailings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.twglobalmall-crm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sales.educationaldesignsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conservativeintelalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.buildourmovement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.backingamericanow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.nzx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.t-mobilefiber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cccorporativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comms.ed.exceedigital.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.homerunrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.innovationcarepartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.masslottery-communications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bluewaterrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.everlightsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email-ezanchorpuller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.atlantisrewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shortstoprewards.cstoresavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.daspeweb-mkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.belluna.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.ryuryumall.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.frontiersawmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emails.pbhfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.digicelinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.oc-cf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.microtecnica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cjfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pekininsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.m.smile-zemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.lifenet-seimei.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ymcamemphis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.collage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.medicareinfo.cigna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.shine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.petrobras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sf.nssco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customercommunications.csx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gmgneverrests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.wcei.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.leadership.deakin.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.onlinenursing.holyfamily.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.i.studyonline.unsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.insure.marqueeig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail2.dealersight.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.gopineapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.saintgobainconstrucao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfemail.colonybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.taxonera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicaciones.terza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.destaque.unisa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gorenje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.isufoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.employeecomms.mta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.go2.nsf.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cwknetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailers.aisglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.santodigital.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.my.gosummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nestle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rewards.redbarnmkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tauckemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.customercare.adrianasinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.tolucafcdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.reliasacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edu.reliasmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.education.freecme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.education.nurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mainstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.usaswimming.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunica.jeitto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.draftkings-vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.reddsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.suppliercentralcomms.coles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.care.boystown.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.nomura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.conteudo.dynamox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.coopminutodedios.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiabrasilia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiacoelba.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiacosern.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiaelektro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.neoenergiapernambuco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.blinkmail.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contaazulempresas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.hmgics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.edm.bcu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cuehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.fuqua.duke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.quicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.skillsfuture.gov.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.message.sandyspringbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nuestrosparquescementerios.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.rmc.ucsd.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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