secure-uswe2-1.tessituranetwork.com

- Tessitura Network, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:80:48:45:ff:fb:0e:2e:8f:df:8a:44:6f:48:ee:a5 was issued on by DigiCert Inc.

With 126 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Tessitura Network, Inc.

Organization: Tessitura Network, Inc.
State / Province: Texas
Locality: Dallas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:80:48:45:ff:fb:0e:2e:8f:df:8a:44:6f:48:ee:a5
Serial Number (int): 5982991860488982689791358834989133477
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e9:0e:20:5c:a2:1a:2f:9e:ce:79:55:bc:e2:6b:05:35:4c:87:c9:22
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): dd:02:f0:1f:b3:43:28:04:53:34:19:10:11:86:6f:07:af:f7:3a:81
Fingerprint (sha256): f6:56:39:a6:3c:75:d2:42:0d:9b:f3:0b:21:e4:c6:95:6e:d1:49:2f:3d:90:4e:65:38:92:76:5b:c1:0c:ee:a6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate secure-uswe2-1.tessituranetwork.com

126

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-uswe2-1.tessituranetwork.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-uswe2-1.tessituranetwork.com
*.tn.services
*.tnhs.cloud
t-secure-uswe2-1.tessituranetwork.com
pst1.tessituranetwork.com
mst1.tessituranetwork.com
tickets.artistsrep.org
tickets.berkeleyrep.org
purchase.broadwayrose.org
secure.calperformances.org
my.californiasciencecenter.org
store.ensembletheatre.com
tickets.galloarts.org
ticketing.granadasb.org
purchase.groundlings.com
tickets.haughpac.com
purchase.lagunaplayhouse.com
wowfestival.lajollaplayhouse.org
securesite.lajollaplayhouse.org
checkout.lobero.com
my.lfjcc.org
tickets.orsymphony.org
order.pnb.org
my.pasadenaplayhouse.org
securesite.pcs.org
tickets.philharmonicsociety.org
purchasing.sandiegosymphony.org
secure.seattleopera.org
cart.seattlesymphony.org
www.stanfordlivetickets.org
sto.stanfordtickets.org
my.theatreworks.org
tickets.mondaviarts.org
tickets.artsandlectures.ucsb.edu
tickets.thewallis.org
tickets.lutherburbankcenter.org
secure-tickets.berkeley.edu
tickets.hawaiiopera.org
my.californiahistoricalsociety.org
store.mopop.org
ticketing.thetech.org
tickets.lamasterchorale.org
cart.pacificchorale.org
cart.lamiradatheatre.com
tickets.thesmithcenter.com
transaction.theconrad.org
my.montalvoarts.org
my.broadwaysacramento.com
tickets.cerritoscenter.com
secure.thesymphony.org
order.acttheatre.org
cart.sunsetcenter.org
tickets.calacademy.org
secure.vancouversymphony.ca
secure.foxtheaterspokane.org
secure.act-sf.org
tickets.theshedd.org
secure.seattleartmuseum.org
checkout.colburnschool.edu
tickets.balletaz.org
tickets.azopera.org
tickets.azscience.org
tickets.phoenixtheatre.com
tickets.phoenixsymphony.org
my.scottsdalemuseumwest.org
shop.youraga.ca
support.arvadacenter.org
tickets.cupresents.org
tickets.coloradoballet.org
tickets.coloradosymphony.org
shop.artscommons.ca
tickets.edmontonopera.com
tickets.intermountainarts.org
subscription.magicspace.net
my.operacolorado.org
secure.performancesantafe.org
secure.santafechambermusic.com
boxoffice.santafesymphony.org
cart.thanksgivingpoint.org
my.usuo.org
my.winspearcentre.com
shop.calgaryopera.com
boxoffice.balletwest.org
tickets.haletheater.org
tickets.lensic.org
secure.sfperformances.org
my.lawrencehallofscience.org
my.moonlightstage.com
official.santafeopera.org
tickets.hultcenter.org
my.5thavenue.org
secure.neonmuseum.org
cart.grammymuseum.org
secure.portlandopera.org
secure.rmts.bc.ca
secure.japanesegarden.org
ticket.uoregon.edu
secure.thefreight.org
tickets.osfashland.org
tickets.entcenterforthearts.org
my.nmculture.org
my.obt.org
my.arttix.org
tickets.laketahoeshakespeare.com
secure.bampfa.org
tickets.sfpromusica.org
secure.citadeltheatre.com
events.kqed.org
cart.scr.org
secure.thereser.org
my.pacificsciencecenter.org
my.jaccc.org
secure.vancouveropera.ca
tickets.sdopera.org
secure.theatrecalgary.com
my.taproottheatre.org
my.crockerart.org
secure.operasj.org
artsandculture.cabq.gov
visit.mayfieldtheatre.ca
my.bioparksociety.org
my.denverzoo.org
secure.psmuseum.org
secure.geffenplayhouse.org
cart.edmontonarts.ca
secure.mccallumtheatre.org

Other certificates including the domain name tessituranetwork.com

(limited to 100 certificates)
*.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
welcome.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
tcpd.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
tlcc2019.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
*.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
secure-usea1-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
incapsula.com
secure-usea2-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea1-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
incapsula.com
incapsula.com
tcpd.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-usea2-1.tessituranetwork.com
secure-uswe2-1.tessituranetwork.com
secure-euwe1-1.tessituranetwork.com

Certificate

The complete raw certificate details for secure-uswe2-1.tessituranetwork.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsljmSz9QRkpjavZoArM6
Lfykhv52r9fwCMlOJeW3mAiUcLCBVD/fMsCGzQS36o7NtDVAsz6yY42MVLmdGXIh
Y6y4+HtCY7AFnX8ZeH5kC0qgF/8hhKL9LivgukU9ZnX+IE0ZIih6wy4vE9miux2r
+8AqtEL8V7mSF5/wOYGSWVnNwAks2Trgs9y67sVaAzkORL6nLmYLjXPZ+1B103g/
067CKriT1VZkVkVSCNnifWcINUqrLo5XQzmOW/gh4Vw+LBXBe4IOAD068hcnpRiU
FwYrX03Ag1s/CGYt0J64rUKzxBmaXB4MwS1is2uFX38BWQCzsP801JpTKIuR7xt8
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5982991860488982689791358834989133477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tessitura Network, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22514256303524067977795469780233512705505488429210718140007921531499719033898076386763174880967736964994991770702998079604921322941811058709981133097611589380858134603897247516518732131052868532046752599741014276817259181306868780554313944977794378863756213167406909268832354726197240172798863676488207305055648260858722181623230270243059130249101813770087755484779148993033199369029864283164027754165085292167566876432416104281910959205488850517220181487114742299616947364860615228514633523712083355188596029774075864727114176255551518599977199483060406513669768407916732983135631661328690345362878548267426238921849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e90e205ca21a2f9ece7955bce26b05354c87c922
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tn.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnhs.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-secure-uswe2-1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mst1.tessituranetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artistsrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.berkeleyrep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.broadwayrose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.calperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiasciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.ensembletheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.galloarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.granadasb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.groundlings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haughpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.lagunaplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowfestival.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.lajollaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.lobero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lfjcc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.orsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.pnb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pasadenaplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesite.pcs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.philharmonicsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchasing.sandiegosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.seattlesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanfordlivetickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto.stanfordtickets.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.theatreworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.mondaviarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.artsandlectures.ucsb.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thewallis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lutherburbankcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-tickets.berkeley.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hawaiiopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.californiahistoricalsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mopop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketing.thetech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lamasterchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.pacificchorale.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.lamiradatheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.thesmithcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transaction.theconrad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.montalvoarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.broadwaysacramento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cerritoscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.acttheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.sunsetcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.calacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouversymphony.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.foxtheaterspokane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.act-sf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.theshedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.seattleartmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.colburnschool.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.balletaz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.azscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixtheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.phoenixsymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.scottsdalemuseumwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.youraga.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.arvadacenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.cupresents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradoballet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.coloradosymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.artscommons.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.edmontonopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.intermountainarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscription.magicspace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.operacolorado.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.performancesantafe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.santafechambermusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.santafesymphony.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.thanksgivingpoint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.usuo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.winspearcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.calgaryopera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxoffice.balletwest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.haletheater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.lensic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sfperformances.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.lawrencehallofscience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.moonlightstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'official.santafeopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.hultcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.5thavenue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.neonmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.grammymuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.portlandopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rmts.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.japanesegarden.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.uoregon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thefreight.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.osfashland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.entcenterforthearts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.nmculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.obt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.arttix.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.laketahoeshakespeare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bampfa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sfpromusica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.citadeltheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.kqed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.scr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.thereser.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.pacificsciencecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jaccc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.vancouveropera.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.sdopera.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.theatrecalgary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.taproottheatre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.crockerart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.operasj.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artsandculture.cabq.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.mayfieldtheatre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bioparksociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.denverzoo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.psmuseum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.geffenplayhouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.edmontonarts.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mccallumtheatre.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ad3140e5e0000040300473045022100e983950b7e03111799043c6d9147e23d6a331d1d674f677af73ffb6f8abca1b102201d8fc4f2344de67e45778067aa3001a783dabca9ec3986b2007d8360cf3af6e10074007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad3140e2d0000040300453043021f10a47d0e2012a6bfb5777a8ceb0bb128fe25bc4c37274e7e766e649531fac502202e939f7ac4cf1c86daad8f2587d3ef0f3c45476f06f4abb20942208a86048c2d007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad3140e5e0000040300483046022100807e3376e04cc3d7b449c30f2e0282f88d0346ba8b3fe83452f15bc187d87310022100d927b8a7b30c36e04193c5a7fc99f3317d2db6ad0ddd64b8ab3e193b1d9a028a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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