secure-uswe2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:7a:72:69:93:88:c0:23:52:cf:57:9d:9b:cf:ad:1e was issued on by DigiCert Inc.

With 125 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:7a:72:69:93:88:c0:23:52:cf:57:9d:9b:cf:ad:1e
Serial Number (int): 11269604742332073943268106930911948062
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b8:77:92:8c:e7:aa:27:4f:e2:4e:79:32:05:7f:78:b8:90:da:ad:48
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e7:61:a4:c0:dd:9e:f6:1f:41:7e:47:3b:27:d8:52:45:ae:57:b5:d2
Fingerprint (sha256): e9:3d:c6:6a:6d:05:8b:0b:2d:88:74:34:0f:20:0f:4b:a4:af:ad:cf:ea:fb:98:39:a8:ae:df:e9:c0:cd:33:e8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate secure-uswe2-1.tessituranetwork.com

125

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-uswe2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-uswe2-1.tessituranetwork.com
*.tn.services
*.tnhs.cloud
t-secure-uswe2-1.tessituranetwork.com
pst1.tessituranetwork.com
mst1.tessituranetwork.com
tickets.artistsrep.org
tickets.berkeleyrep.org
purchase.broadwayrose.org
secure.calperformances.org
my.californiasciencecenter.org
store.ensembletheatre.com
tickets.galloarts.org
ticketing.granadasb.org
purchase.groundlings.com
tickets.haughpac.com
purchase.lagunaplayhouse.com
wowfestival.lajollaplayhouse.org
securesite.lajollaplayhouse.org
checkout.lobero.com
my.lfjcc.org
tickets.orsymphony.org
order.pnb.org
my.pasadenaplayhouse.org
securesite.pcs.org
tickets.philharmonicsociety.org
purchasing.sandiegosymphony.org
secure.seattleopera.org
cart.seattlesymphony.org
www.stanfordlivetickets.org
sto.stanfordtickets.org
my.theatreworks.org
tickets.mondaviarts.org
tickets.artsandlectures.ucsb.edu
tickets.thewallis.org
tickets.lutherburbankcenter.org
secure-tickets.berkeley.edu
tickets.hawaiiopera.org
store.mopop.org
ticketing.thetech.org
tickets.lamasterchorale.org
cart.pacificchorale.org
cart.lamiradatheatre.com
tickets.thesmithcenter.com
transaction.theconrad.org
my.montalvoarts.org
my.broadwaysacramento.com
tickets.cerritoscenter.com
secure.thesymphony.org
order.acttheatre.org
cart.sunsetcenter.org
tickets.calacademy.org
secure.vancouversymphony.ca
secure.foxtheaterspokane.org
secure.act-sf.org
tickets.theshedd.org
secure.seattleartmuseum.org
checkout.colburnschool.edu
tickets.balletaz.org
tickets.azopera.org
tickets.azscience.org
tickets.phoenixtheatre.com
my.scottsdalemuseumwest.org
shop.youraga.ca
support.arvadacenter.org
tickets.cupresents.org
tickets.coloradoballet.org
tickets.coloradosymphony.org
shop.artscommons.ca
tickets.edmontonopera.com
tickets.intermountainarts.org
subscription.magicspace.net
my.operacolorado.org
secure.performancesantafe.org
secure.santafechambermusic.com
boxoffice.santafesymphony.org
cart.thanksgivingpoint.org
my.usuo.org
my.winspearcentre.com
shop.calgaryopera.com
boxoffice.balletwest.org
tickets.haletheater.org
tickets.lensic.org
secure.sfperformances.org
my.lawrencehallofscience.org
my.moonlightstage.com
official.santafeopera.org
tickets.hultcenter.org
my.5thavenue.org
secure.neonmuseum.org
cart.grammymuseum.org
secure.portlandopera.org
secure.rmts.bc.ca
secure.japanesegarden.org
ticket.uoregon.edu
secure.thefreight.org
tickets.osfashland.org
tickets.entcenterforthearts.org
my.nmculture.org
my.obt.org
my.arttix.org
tickets.laketahoeshakespeare.com
secure.bampfa.org
tickets.sfpromusica.org
secure.citadeltheatre.com
events.kqed.org
cart.scr.org
secure.thereser.org
my.pacificsciencecenter.org
my.jaccc.org
secure.vancouveropera.ca
tickets.sdopera.org
secure.theatrecalgary.com
my.taproottheatre.org
my.crockerart.org
secure.operasj.org
artsandculture.cabq.gov
visit.mayfieldtheatre.ca
my.bioparksociety.org
my.denverzoo.org
secure.psmuseum.org
secure.geffenplayhouse.org
cart.edmontonarts.ca
secure.mccallumtheatre.org
secure.denvercenter.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-uswe2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgwQkjOf7ddzqK75ANyZ
0oHz1BO46m/USHrJU+8MZBr+iQB9Rxpr0JEiQgG30dmI8QyeL194xrLio8HO3o6I
JF/smYeKSa55WuOjwrf0gZDKS6xHmmqqOaEbF2sqR3LiTrG5zO7+B5Hwi5+hNY8D
hfP5MlImDja6aEZI055KxPn0KBfqVP1qnNw6782XyosacgFjQfQw3+GmJ+aoJQPE
hH5zaLF4459DDY5VCEIO84o3IpZVzJZI4iKdWGTWxVZS0Sroc0uONpcaUarv7EMn
Dh66UZC4R8J2j4QH/XsZ/1vqwLimfqH376sIBYHYLBf5i5OAyFrmCbFFWY7H57Dy
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11269604742332073943268106930911948062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24496180503937532839397159706567757416599674143384523186005765606602946051017076451381007102269203557292048040733791259762465375020439244386218258238421276729955572369044747372056821991888876812224393544797531800870628314564765667489686211887131456066690689872519956552886409480920392112086683047857636767849073496381328013090197710574251851601279850814228884527287794514265874509362716004103193256426837090900703439416319982739853528699262238962641610026799456636908683848032036460109312672867395443945504567153611312745245663344822943578778293379318042224701472391684444392607043571311216290957339478262862559900377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b877928ce7aa274fe24e7932057f78b890daad48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3095 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artistsrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.berkeleyrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.broadwayrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ensembletheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.galloarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.granadasb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.groundlings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haughpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.lagunaplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfestival.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lobero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lfjcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.orsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pasadenaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.pcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.philharmonicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.sandiegosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.seattlesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordlivetickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto.stanfordtickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mondaviarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewallis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lutherburbankcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-tickets.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hawaiiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mopop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.thetech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lamasterchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.pacificchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lamiradatheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesmithcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction.theconrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.montalvoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.broadwaysacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cerritoscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.acttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sunsetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.calacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouversymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foxtheaterspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.act-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theshedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.colburnschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scottsdalemuseumwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.youraga.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.arvadacenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cupresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradoballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.artscommons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.edmontonopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.intermountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.magicspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performancesantafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.santafechambermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.santafesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usuo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.winspearcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calgaryopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haletheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lensic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sfperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lawrencehallofscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.moonlightstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'official.santafeopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hultcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.5thavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.neonmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.grammymuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.portlandopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rmts.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.japanesegarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.uoregon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thefreight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.osfashland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.entcenterforthearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nmculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.obt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.arttix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.laketahoeshakespeare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bampfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sfpromusica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.citadeltheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.scr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thereser.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pacificsciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jaccc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouveropera.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sdopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.theatrecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.taproottheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.crockerart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.operasj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsandculture.cabq.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.mayfieldtheatre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bioparksociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.denverzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.geffenplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.edmontonarts.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mccallumtheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.denvercenter.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ccac1a5f4000004030046304402203c61896d7026e28672cdbb7c1ea70b3f32f55703bfff67230ed15fd26011873d02203d0698cc492b45e81a00e88d72f9b0a40d5d39c87aca702fec9d50dba19058a100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ccac1a5f3000004030047304502206601be0b40bea53cc255e938ec05b5c59b1f6728136babb5ddb446a4c5e032ea022100bed244ec70b915e09cc65a3678421733646e58f8a218b1d7c110531ff2607ce1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ccac1a5e90000040300473045022100c523efef7c52997bd1593fea2f5f430647d5aa656a76ef2639b2b3803dd2c8050220777f2de109c8b6ef69a3e7d3f625c5e6b7009b3efe03e6eb89634c94311e13a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009ff8401b76c5645874e53bbe96cd01b650176d16d1419ba646bf77daf06664b05da12d1d82257f811368c9933c10c936914fec20f83888652681240b550fbddccbed54d8b5a39217f5a7d81c8d3216159bad69d1b88fe9a8657121738c52462b745df5abc18f30c330c41c6427d03ff6464c458e132dfd186deedc749c8dbd77bd3c84714de313934a28ab104e16ed9afebe7d7856ad247dda657a4773a04b3f927bd33a608a041c593c9fababfc874c611d9cb1626c0670eb76780e1c8129e588abcebcc744886c67afa9ceda278e56ee86b3ea75676048d767c5a73823c152445308bfb9437e3b52597d412cb687c97678391a9fd553fc09ca7bc6280ab4d6