Certificate:

    Data:

        Version: 3 (0x2)

        Serial Number:

            07:5f:69:de:ee:fb:a6:c2:99:10:be:25:a0:98:2b:88

        Signature Algorithm: sha256WithRSAEncryption

        Issuer: C = US, O = DigiCert Inc, CN = DigiCert Global G2 TLS RSA SHA256 2020 CA1

        Validity

            Not Before: Nov 16 00:00:00 2024 GMT

            Not After : Dec 17 23:59:59 2025 GMT

        Subject: C = US, ST = California, L = San Francisco, O = "Salesforce, Inc.", CN = cloud.email.bareminerals.com

        Subject Public Key Info:

            Public Key Algorithm: rsaEncryption

                Public-Key: (2048 bit)

                Modulus:

                    00:af:66:f5:db:a0:a0:d3:ae:4f:97:53:af:9d:44:

                    70:ab:49:0a:c8:ce:a7:fb:34:ff:0a:c8:64:c6:37:

                    e5:23:97:c6:0f:0e:61:9e:9d:5e:f0:df:9a:3e:b2:

                    e3:75:f8:25:72:8b:dd:c3:c2:13:f9:a9:ce:64:ce:

                    20:5a:5f:21:f9:2e:b7:29:ad:f7:8d:00:a6:3b:ae:

                    a9:6c:aa:95:68:f1:22:31:0b:47:65:07:32:a4:4b:

                    47:0e:de:9d:07:b3:d1:c9:ee:44:fa:24:67:af:3c:

                    f6:d2:00:81:cb:7a:29:39:be:4f:e2:5d:89:39:ac:

                    42:95:c2:d8:c7:5b:c2:d6:b1:29:b1:00:77:50:c3:

                    2d:fe:cf:fd:67:48:a7:de:44:83:fd:9f:cf:3f:f2:

                    f6:22:ab:ac:7b:7d:96:82:c3:ca:86:80:97:80:bd:

                    ec:a4:d2:1e:2a:fe:6c:6e:4b:26:c6:c7:ff:24:48:

                    68:eb:8f:8b:4a:ba:3d:79:fc:0e:c8:60:ea:0e:c7:

                    51:9c:0b:97:09:04:35:6a:0f:15:69:99:24:4b:4c:

                    a5:5e:24:f1:eb:7c:95:83:f4:ec:cf:90:73:45:1d:

                    81:c0:43:91:83:4d:1f:93:dc:8d:49:cb:70:57:a8:

                    4f:b9:0b:8c:b1:1c:5a:66:19:ba:96:df:bf:6e:11:

                    20:39

                Exponent: 65537 (0x10001)

        X509v3 extensions:

            X509v3 Authority Key Identifier:

                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17

            X509v3 Subject Key Identifier:

                8F:FB:CE:98:79:96:60:AD:32:A7:F3:54:C2:F3:12:2A:C1:AB:CE:C1

            X509v3 Subject Alternative Name:

                DNS:cloud.email.bareminerals.com

            X509v3 Certificate Policies:

                Policy: 2.23.140.1.2.2

                  CPS: http://www.digicert.com/CPS

            X509v3 Key Usage: critical

                Digital Signature, Key Encipherment

            X509v3 Extended Key Usage:

                TLS Web Server Authentication, TLS Web Client Authentication

            X509v3 CRL Distribution Points:

                Full Name:

                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

                Full Name:

                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

            Authority Information Access:

                OCSP - URI:http://ocsp.digicert.com

                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

            X509v3 Basic Constraints: critical

                CA:FALSE

            CT Precertificate SCTs:

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : DD:DC:CA:34:95:D7:E1:16:05:E7:95:32:FA:C7:9F:F8:

                                3D:1C:50:DF:DB:00:3A:14:12:76:0A:2C:AC:BB:C8:2A

                    Timestamp : Nov 16 18:09:36.432 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:20:0E:1C:10:49:E5:4B:23:96:C3:24:E1:84:

                                12:C6:60:37:4D:49:07:AB:C9:A2:C5:FA:07:70:95:F1:

                                03:44:68:99:02:21:00:E4:6F:E6:96:07:FB:D3:ED:B6:

                                3A:40:5A:E7:7C:A6:92:05:0A:C9:18:AC:BC:16:32:92:

                                D0:0C:2A:D6:E5:71:C3

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:

                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50

                    Timestamp : Nov 16 18:09:36.432 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:46:02:21:00:90:2B:3D:7E:0D:D1:73:F5:70:D0:63:

                                D5:98:68:DF:5D:E9:87:D4:A8:9F:F3:BB:A5:5C:4E:0B:

                                E4:AE:78:B6:A1:02:21:00:B6:D0:EA:F4:E4:66:C5:9D:

                                A1:AB:CF:F1:C5:DF:DC:EE:C4:08:48:86:42:48:8B:35:

                                6D:64:8D:6C:A7:AB:31:64

                Signed Certificate Timestamp:

                    Version   : v1 (0x0)

                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:

                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0

                    Timestamp : Nov 16 18:09:36.439 2024 GMT

                    Extensions: none

                    Signature : ecdsa-with-SHA256

                                30:45:02:20:1B:42:FA:F9:03:20:4F:BD:96:81:30:E2:

                                A9:AD:01:85:93:DF:EC:2C:0A:4E:E9:4A:9D:E7:4A:D7:

                                A6:B6:52:0C:02:21:00:D8:53:61:BD:59:5B:F7:EA:AA:

                                24:25:05:B9:1B:76:C2:A4:02:5E:51:A5:87:1B:41:B1:

                                CA:98:25:67:C5:42:96

    Signature Algorithm: sha256WithRSAEncryption

    Signature Value:

        05:d5:78:89:88:26:f4:f3:b6:50:a5:b5:ea:75:9a:66:af:8a:

        47:fc:08:d9:20:6c:07:f4:09:f3:3a:3e:1e:4b:13:0e:a8:57:

        cb:f6:04:80:3d:8b:fa:98:65:35:48:0b:58:c6:77:e6:fb:42:

        d3:7d:bd:83:fd:a6:c9:37:a2:33:59:2c:02:b5:76:8b:77:28:

        e8:1b:34:80:6d:82:a5:c7:4a:b0:65:9e:b0:be:af:5c:71:5b:

        48:09:72:73:23:24:4a:d1:a7:08:b5:8a:36:ff:f6:dd:ee:3a:

        2f:91:48:c2:07:00:36:08:29:cf:61:e7:c0:09:b8:d3:38:cb:

        ef:b1:c7:e4:c9:17:f4:97:f6:fa:a4:80:f4:1f:2f:27:e8:9a:

        fd:a4:08:d9:71:a1:55:9d:c9:2e:03:49:0e:3a:b6:55:e5:75:

        13:fe:67:59:75:ed:6d:37:49:4e:7c:5e:c3:d7:e0:00:c6:e1:

        ba:94:b0:57:11:27:fe:6d:2b:79:fa:2a:a8:11:f1:ce:de:6c:

        f3:48:36:5f:7c:5f:9d:8e:5a:98:78:de:c0:d2:b6:0c:88:c8:

        bf:a1:d2:10:1a:47:da:28:17:4a:79:bf:e4:fc:56:2c:a5:37:

        e5:b2:c6:86:d4:f3:70:46:4c:1e:a6:4c:bb:b5:1e:69:0b:2f:

        ab:4e:59:b9

-----BEGIN CERTIFICATE-----

MIIG+jCCBeKgAwIBAgIQB19p3u77psKZEL4loJgriDANBgkqhkiG9w0BAQsFADBZ

MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE

aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjQx

MTE2MDAwMDAwWhcNMjUxMjE3MjM1OTU5WjB8MQswCQYDVQQGEwJVUzETMBEGA1UE

CBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzEZMBcGA1UEChMQ

U2FsZXNmb3JjZSwgSW5jLjElMCMGA1UEAxMcY2xvdWQuZW1haWwuYmFyZW1pbmVy

YWxzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK9m9dugoNOu

T5dTr51EcKtJCsjOp/s0/wrIZMY35SOXxg8OYZ6dXvDfmj6y43X4JXKL3cPCE/mp

zmTOIFpfIfkutymt940ApjuuqWyqlWjxIjELR2UHMqRLRw7enQez0cnuRPokZ688

9tIAgct6KTm+T+JdiTmsQpXC2MdbwtaxKbEAd1DDLf7P/WdIp95Eg/2fzz/y9iKr

rHt9loLDyoaAl4C97KTSHir+bG5LJsbH/yRIaOuPi0q6PXn8Dshg6g7HUZwLlwkE

NWoPFWmZJEtMpV4k8et8lYP07M+Qc0UdgcBDkYNNH5PcjUnLcFeoT7kLjLEcWmYZ

upbfv24RIDkCAwEAAaOCA5kwggOVMB8GA1UdIwQYMBaAFHSFgMBmx9833s+9KTeq

Ax2+7c0XMB0GA1UdDgQWBBSP+86YeZZgrTKn81TC8xIqwavOwTAnBgNVHREEIDAe

ghxjbG91ZC5lbWFpbC5iYXJlbWluZXJhbHMuY29tMD4GA1UdIAQ3MDUwMwYGZ4EM

AQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAO

BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGf

BgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdp

Q2VydEdsb2JhbEcyVExTUlNBU0hBMjU2MjAyMENBMS0xLmNybDBIoEagRIZCaHR0

cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEy

NTYyMDIwQ0ExLTEuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0

dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2Vy

dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIw

Q0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsB

aQB2AN3cyjSV1+EWBeeVMvrHn/g9HFDf2wA6FBJ2Ciysu8gqAAABkzYqhLAAAAQD

AEcwRQIgDhwQSeVLI5bDJOGEEsZgN01JB6vJosX6B3CV8QNEaJkCIQDkb+aWB/vT

7bY6QFrnfKaSBQrJGKy8FjKS0Awq1uVxwwB3AObSMWNAd4zBEEEG13G5zsHSQPaW

hIb7uocyHf0eN45QAAABkzYqhLAAAAQDAEgwRgIhAJArPX4N0XP1cNBj1Zho313p

h9Son/O7pVxOC+SueLahAiEAttDq9ORmxZ2hq8/xxd/c7sQISIZCSIs1bWSNbKer

MWQAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAZM2KoS3AAAE

AwBHMEUCIBtC+vkDIE+9loEw4qmtAYWT3+wsCk7pSp3nStemtlIMAiEA2FNhvVlb

9+qqJCUFuRt2wqQCXlGlhxtBscqYJWfFQpYwDQYJKoZIhvcNAQELBQADggEBAAXV

eImIJvTztlCltep1mmavikf8CNkgbAf0CfM6Ph5LEw6oV8v2BIA9i/qYZTVIC1jG

d+b7QtN9vYP9psk3ojNZLAK1dot3KOgbNIBtgqXHSrBlnrC+r1xxW0gJcnMjJErR

pwi1ijb/9t3uOi+RSMIHADYIKc9h58AJuNM4y++xx+TJF/SX9vqkgPQfLyfomv2k

CNlxoVWdyS4DSQ46tlXldRP+Z1l17W03SU58XsPX4ADG4bqUsFcRJ/5tK3n6KqgR

8c7ebPNINl98X52OWph43sDStgyIyL+h0hAaR9ooF0p5v+T8ViylN+WyxobU83BG

TB6mTLu1HmkLL6tOWbk=

-----END CERTIFICATE-----