san-4-s13.tlsprovisioning.exacttarget.com

- Salesforce.com, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:d4:e8:20:b4:ec:73:fc:cd:e5:92:cc:18:37:4c:f3 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Salesforce.com, Inc.

Organization: Salesforce.com, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d4:e8:20:b4:ec:73:fc:cd:e5:92:cc:18:37:4c:f3
Serial Number (int): 10410071014826198208404900791878896883
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: be:fd:b2:be:56:36:e7:f9:c0:c0:a1:aa:7d:5e:a5:0d:e4:aa:f3:99
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): a2:32:0a:b8:ed:39:3e:d3:2f:62:2a:d1:ed:df:18:5f:61:be:dc:bd
Fingerprint (sha256): e6:c0:ca:03:73:bc:e6:8e:90:c7:7d:f5:f1:53:79:d8:d0:8a:94:52:f1:6d:8b:48:be:06:63:77:0a:1f:b6:8a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate san-4-s13.tlsprovisioning.exacttarget.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-4-s13.tlsprovisioning.exacttarget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

san-4-s13.tlsprovisioning.exacttarget.com
image.mail.joinordo.com
image.email.avadel.com
image.lasmercedesmedcenters.com
image.teamsters.ht399.org
image.e.ashleyhome.com.au
image.mkt.userh.com.br
image.unimail.unimedlondrina.com.br
image.emailmarketing.ffun.com
image.email.confluenceoutdoor.com
image.mktg.kalpataru.com
image.contact.cressetpartners.com
image.email.bluerabbitrx.com
image.email.southarts.org
image.info.campeaodaconstrucao.com.br
image.messaging.ucsc.edu
image.mail.esogrepair.com
image.comunicacioncrm.dimex.mx
image.e.bundll.com.au
image.e.farmersfinancecard.co.nz
image.e.farmersmastercard.co.nz
image.e.flightcentremastercard.co.nz
image.e.humm90.com
image.e.qcard.co.nz
image.e.qmastercard.co.nz
image.e.shophumm.com.au
image.email.glsauto.com
image.email.mrhandymanvanwa.com
image.sfmc.palmeiras.com.br
image.volvocarstw.com
image.wrightimp.marketing
image.cs.hyundai-dealer.net
image.ma.shizensyokuhin.jp
image.e.mlc-cad.com
image.email.milestoneseventh.com
image.email.highperfom.com
image.mail.kipmcgrath.com
image.email.discovernac.org
image.mc.uberfreight.com
image.mkt.empirepavers.com
image.profunding.com
image.resort.nemacolin.com
image.email.vanguardeq.com
image.experiencias.claro.com.ec
image.mktcloud.silimed.com.br
image.email.expansion.mx
image.e.mymedi.ca
image.email.pccu.ca
image.mc.mylsb.com
image.mktg.adelaidesightseeing.com.au
image.mktg.sealink.com.au
image.e.eurekafurniture.com.au
image.ms.macstadium.com
image.offers.audiwilmingtonde.com
image.goto.uml.edu
image.wcm-mail.ford.com
image.shoplocalpharmacy.com
image.est1892.anb.com
image.gia.finance
image.info.csuchico.edu
image.e.caritas-singapore.org
image.email.koyamedical.com
image.email.360v.com.br
image.sfmc.ww-fieldenablement.aws.dev
image.marketing.kanan.co
image.markting.landmarkcars.in
image.comunicacao.caixaprepagos.com.br
image.crm.costao.com.br
image.news.vinacapital.com
image.doitcloudconsulting.com
image.e.discoveryparks.com.au
image.e.gdayparks.com.au
image.email.glpg.online
image.mail.levande.com.au
image.info.cenic.org
image.mail.researchproducts.com
image.marketing.united.net
image.pb.portobrasilceramica.com.br
image.email.abarta.my-coke.com
image.email.cokecanada.my-coke.com
image.email.cokeflorida.my-coke.com
image.email.cokenortheast.my-coke.com
image.email.cona.my-coke.com
image.email.consolidated.my-coke.com
image.email.corebraes.com.br
image.email.southwestbeverages.my-coke.com
image.email.united.my-coke.com
image.emktbb.com.br
image.info.origina.mx
image.mail.finanzbutik.com
image.marketing-centralhoteles.com
image.em.servicecu.org
image.mc.drip-pod.jp
image.communications.taskbridge.com
image.mail.ddecor.in
image.mailing.tya.com.mx

Other certificates including the domain name exacttarget.com

(limited to 100 certificates)
cust.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san63.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
san-26-s12.tlsprovisioning.exacttarget.com
akamai-san234.exacttarget.com
akamai-san38.exacttarget.com
akamai-san123.exacttarget.com
akamai-san42.exacttarget.com
akamai-san50.exacttarget.com
akamai-san129.exacttarget.com
san-8-s13.tlsprovisioning.exacttarget.com
akamai-san152.exacttarget.com
akamai-san58.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-2-s13.tlsprovisioning.exacttarget.com
san-28-s12.tlsprovisioning.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
mc.eu.exacttarget.com
pages.virt.boa.exacttarget.com
san-30-s12.tlsprovisioning.exacttarget.com
globalops.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san10.exacttarget.com
view.s4.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
akamai-san37.exacttarget.com
akamai-san108.exacttarget.com
akamai-san100.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san153.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san20.exacttarget.com
artifactory-xt-p01.exacttarget.com
san-13-s10.tlsprovisioning.exacttarget.com
webservice.boa.exacttarget.com
akamai-san22.exacttarget.com
manage.s4.exacttarget.com
san-16-s12.tlsprovisioning.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-2-s4.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
san-41-s12.tlsprovisioning.exacttarget.com
cust.exacttarget.com
akamai-san210.exacttarget.com
view.boa.exacttarget.com
san-11-s7.tlsprovisioning.exacttarget.com
app.s4.exacttarget.com
san-12-s51.tlsprovisioning.exacttarget.com
akamai-san19.exacttarget.com
san-5-s6.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-29-s12.tlsprovisioning.exacttarget.com
akamai-san121.exacttarget.com
san-4-s1.tlsprovisioning.exacttarget.com
members.boa.exacttarget.com
akamai-san174.exacttarget.com
san-21-s12.tlsprovisioning.exacttarget.com
akamai-san136.exacttarget.com
akamai-san172.exacttarget.com
san-10-s7.tlsprovisioning.exacttarget.com
san-9-s13.tlsprovisioning.exacttarget.com
akamai-san17.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
origin-click.s4.exacttarget.com
san-10-s11.tlsprovisioning.exacttarget.com
akamai-san7.exacttarget.com
akamai-san69.exacttarget.com
akamai-san4.exacttarget.com
san-7-s11.tlsprovisioning.exacttarget.com
manage-api.s4qa1.lp.exacttarget.com
san-11-s11.tlsprovisioning.exacttarget.com
san-8-s51.tlsprovisioning.exacttarget.com
san-8-s11.tlsprovisioning.exacttarget.com
san-10-s10.tlsprovisioning.exacttarget.com
akamai-san198.exacttarget.com
restapi.s6.exacttarget.com
view.s51.exacttarget.com
san-13-s11.tlsprovisioning.exacttarget.com
akamai-san8.exacttarget.com
akamai-san15.exacttarget.com
san-16-s10.tlsprovisioning.exacttarget.com
akamai-san58.exacttarget.com
akamai-san4.exacttarget.com
pages.s50.exacttarget.com
akamai-san22.exacttarget.com
akamai-san247.exacttarget.com
inbox.exacttarget.com
akamai-san94.exacttarget.com
san-3-s51.tlsprovisioning.exacttarget.com
san-1-s1.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
san-10-s51.tlsprovisioning.exacttarget.com
san-38-s12.tlsprovisioning.exacttarget.com
san-9-s7.tlsprovisioning.exacttarget.com
akamai-san194.exacttarget.com
san-3-s1.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for san-4-s13.tlsprovisioning.exacttarget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UiGngA2n6UifjqaNpFi
PBxlNniDoRm3//k/6Rit7SDLjkS3U8lZkj8viALqHQ9OrCm7rL7AXxFeZA0/9Aaa
QgZLwtPM7lmO/7QHrDpauVDzEyYDfMUToVevmL/cPbQRy/OpUn2L9ywKDqDM2eWZ
z6lU1ZgVi6HKlXFxs8vH+mT6PqUviR87KbMbMugWvWijjbpLL+4H6le9VsV7iyl4
JY9GCnojyGj/ESBu5LYaY2c6Pt5qiFWctV83c4QUuuh6V3oiebEPLBKqi1Jqecki
LAhwSGcpxvof5BXTaI1U8v0ciGr9GPfpcjWNfyp3S5Vbu0TDlse3Yf4J+IZ1X+Ak
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10410071014826198208404900791878896883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-4-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26419569566689130166200623573163906046155784666001752674325207861153417337155274390291177224472621410861292174360376029231685510668686633693319908555665907375939472001960933505382568111428890350731199638069902784564681973162121889749756535368592446259689790936234123356780336192950479777015391840032636208850090969844286065859523108600273378987089620726119188899995618091314918453510786879589966848039538841130831349111773387157321413246753851625868747889432980426108763702081033950240519393226923950309342207838333486582497492230665721892700611639427155180818244420726619737166031709810753409723219155183234214536251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							befdb2be5636e7f9c0c0a1aa7d5ea50de4aaf399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2779 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-4-s13.tlsprovisioning.exacttarget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.joinordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.avadel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.lasmercedesmedcenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.teamsters.ht399.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.ashleyhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.userh.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.unimail.unimedlondrina.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emailmarketing.ffun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.confluenceoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.kalpataru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.contact.cressetpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.bluerabbitrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.southarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.campeaodaconstrucao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.messaging.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.esogrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacioncrm.dimex.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.bundll.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.farmersfinancecard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.farmersmastercard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.flightcentremastercard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.humm90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.qcard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.qmastercard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.shophumm.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.glsauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.mrhandymanvanwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.palmeiras.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.volvocarstw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wrightimp.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.cs.hyundai-dealer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ma.shizensyokuhin.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mlc-cad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.milestoneseventh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.highperfom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.kipmcgrath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.discovernac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.uberfreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mkt.empirepavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.profunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.resort.nemacolin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.vanguardeq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.experiencias.claro.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktcloud.silimed.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.expansion.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.mymedi.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.pccu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.mylsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.adelaidesightseeing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mktg.sealink.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.eurekafurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.ms.macstadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.offers.audiwilmingtonde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.goto.uml.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.wcm-mail.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.shoplocalpharmacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.est1892.anb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.gia.finance'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.csuchico.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.caritas-singapore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.koyamedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.360v.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.sfmc.ww-fieldenablement.aws.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.kanan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.markting.landmarkcars.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.comunicacao.caixaprepagos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.crm.costao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.news.vinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.doitcloudconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.discoveryparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.e.gdayparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.glpg.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.levande.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.cenic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.researchproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing.united.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.pb.portobrasilceramica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.abarta.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cokecanada.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cokeflorida.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cokenortheast.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.cona.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.consolidated.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.corebraes.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.southwestbeverages.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.email.united.my-coke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.emktbb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.info.origina.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.finanzbutik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.marketing-centralhoteles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.em.servicecu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mc.drip-pod.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.communications.taskbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mail.ddecor.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.mailing.tya.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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