prod.3.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:41:20:ae:f7:00:df:48:fc:ad:16:d0:d4:7a:07:93:2b was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.3.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:41:20:ae:f7:00:df:48:fc:ad:16:d0:d4:7a:07:93:2b
Serial Number (int): 334584136205216899342263257413980258800427
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:82:9a:d8:61:15:40:3b:64:50:9d:ef:bb:8e:4d:b0:59:69:70:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:82:ad:11:bd:40:27:48:d6:5c:7a:07:45:8e:08:13:b8:8c:72:ac
Fingerprint (sha256): 00:17:8a:d8:39:d6:70:99:d0:31:ff:22:17:aa:9e:d4:db:0d:ec:40:9e:fb:9e:d9:ee:18:0b:96:25:6e:25:4e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.3.slot.cdn.salesforce-communities.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.3.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ajuda.frenet.com.br
app.paycaptain.com
apply.online.keele.ac.uk
apply.online.sunderland.ac.uk
apply.online.wlv.ac.uk
auth.ajc-dev.com
betterwaysa.ahlanopen.com
broker.recognisebank.co.uk
cdn.um1.blitztesting.com
cdn.um5.blitztesting.com
comms.infinityworks.com
content.fournet.co.uk
content.kerfuffle.com
content.mgnevents.co.uk
coronavirus.morgansindallpropertyservices.com
developer.shell.com
events.5hertfordstreet.com
globalsupportticket.com
help.maier-consultants.com
hub.higheredpartners.co.uk
icp.ajc-dev.com
lending.recognisebank.co.uk
login.sonali-bank.co.uk
pardot.jccchicago.org
partners.axi-china.com
partners.axi-china.net
partners.axi-cn.com
partners.axi-indo.com
partners.axi-indo.net
partners.axi-indo.org
partners.cn-axi.net
partners.indonesiaaxi.com
payment.act.com
portal.cornwall-insight.com
portal.energyadvice.scot
prod.3.slot.cdn.salesforce-communities.com
reg.ff.co
salesforcecdn.pcipal.com
services.sonali-bank.co.uk
shop.nambrew.com
support.act.com
support.bactrack.com
support.communitybrands.uk
support.gooru.org
support.hexagonmi.com
support1.gooru.org
www.5hertfordstreet.com
www.connectrb.com
www.diageosuppliers.com
www.electric-suitcase.com
www.feinvestments.co.uk
www.hcp.nutramigen.co.uk
www.helpourcareheroes.co.uk
www.ibuprofenclarity.info
www.mpediatria.com.mx
www.mytrialcommunity.com
www.rayaship.com
www.rbforhealth.co.uk
www.rbhcprofessional.com
www.rbprofessional.com
www.rbwithyou.pt
www.rghi.org
www.salesforceworldtour.com.au
www.sline.ma
www.slinerates.com
www.xenogenix.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.3.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nBXBlVrKU5ktqwotxLh
HQH/GZ8DiOJRiAh5zKlWkaq1z75/ZBAOy3mGtlDlsDTCV8EZv4i0YsdosXmh1J9F
1AuLNief2dWEG67HdpI3i8bIdd6GM6131t+2QoXQgXGtSzvx4Ca/Zx45aSjz6rFn
FbbWTkZj/pRYWERy/hqi1oCKhQYDXDvIDVYunUQjETIm4fOTSjiUJYjwE9utq6Z9
MxtjF1MMUy5x30Hdg7XInStiicyOGDFu5GmjOw1i4a2V6quMUkjoVrHFN2dfFWzo
51xzlJb6JBhstffEpcArgHyW1YlGxo68LOPLtm++vTNFeMa4TEWTqIcj3+OY0OBp
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334584136205216899342263257413980258800427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-10 15:20:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-10 15:20:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.3.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27070394152015204039927169494023649856762880652055298647288013044075483299224516429652586678904394727671689701672667423887509707360271321383618294498914506423993341050083629555583365097251147958406181689603691450138076814836361167573433248437851208472125140233043537541745689859317952731342422152092887343029513551444077915815277987898230315279628699394630567836292780256656593022771075832310275770591288981979721432858558364073785298823644646071954004406254575870299732529169543483598082118511317306787194617864111621792099649195597456521337705028529370476094101566911172303567247829844460618680060858427424158804319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be829ad86115403b64509defbb8e4db0596970e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuda.frenet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.paycaptain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.online.keele.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.online.sunderland.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.online.wlv.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.ajc-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterwaysa.ahlanopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broker.recognisebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um5.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comms.infinityworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.fournet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.kerfuffle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mgnevents.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coronavirus.morgansindallpropertyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.shell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.5hertfordstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsupportticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.maier-consultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.higheredpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icp.ajc-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lending.recognisebank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.sonali-bank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.jccchicago.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi-china.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi-china.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi-cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi-indo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi-indo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi-indo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cn-axi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.indonesiaaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.act.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.cornwall-insight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.energyadvice.scot'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.3.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reg.ff.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecdn.pcipal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.sonali-bank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.nambrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.act.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bactrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.communitybrands.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.hexagonmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support1.gooru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.5hertfordstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connectrb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diageosuppliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electric-suitcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feinvestments.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcp.nutramigen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpourcareheroes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibuprofenclarity.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpediatria.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytrialcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rayaship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbforhealth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbhcprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbwithyou.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rghi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salesforceworldtour.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sline.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slinerates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xenogenix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001764d73e54d000004030047304502202db0bcb7c8df77980024744e2975cf055892dfd2deea4c31ec73eba29f2b2f18022100abfa0912ad4fae6faffd94f2e46fab1ac9ca896407c3aea610d5a036781b4bf90075009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c2000001764d73e73e000004030046304402202c3e08fc6c6fab1334e96b8ee7011de943507a2157ab3256032795c45e911f4702203c32bc62b678b98c6b4658e9411f083eec0e6b52c65b84a6f4b4776b6734833b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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