prod.2.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ed:08:34:db:8e:b6:b5:58:1c:5c:c5:5c:18:02:72:d0:67 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.2.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:08:34:db:8e:b6:b5:58:1c:5c:c5:5c:18:02:72:d0:67
Serial Number (int): 341994687032100726698905032521410956939367
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:47:d8:f6:9f:26:d7:47:34:d7:bd:53:1d:89:81:ce:41:f9:db:65
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:3e:e4:ff:e4:f6:76:4d:1f:3b:e7:11:c5:d1:cd:97:a2:3c:1e:e0
Fingerprint (sha256): 00:5e:42:db:10:90:d9:38:e3:d6:68:d3:62:a1:ff:7b:ab:70:b6:53:b4:99:1f:c6:fe:98:d5:b7:5f:0c:1a:e7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.2.slot.cdn.salesforce-communities.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.2.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankauf.ecary.de
apn.rickhansen.com
bfrg.alphanet.org
catalyst-dev.ctlyst.io
cdn.eu32.blitztesting.com
cdn.na122.blitztesting.com
cdn.na64.blitztesting.com
cdn.na91.blitztesting.com
cdn.na93.blitztesting.com
cms.encinacapital.com
cms.sahkolaitos.fi
cms.t-mobile.com
communities.deluxe.com
community.athenasoftware.net
community.calcpa.org
content.macdc.org
content.mail.thron.com
content.maxex.com
crm.ecary.de
customer.bionic.co.uk
customer.lendai.us
customers.litmus.io
customersupport.zscaler.com
esgwarranty.doveresg.com
harmony.purplesense.org
help.clearbanc.com
help.merchant.quadpay.com
help.wework.com
hive.sambanova.ai
members.aaup.org
mon.strigo.ca
my.bethematch.org
my.strigo.ca
myactivities.educationfoundation.org
myamgen.amgen.com
mycommunity.amgen.com
mywharton.wharton.upenn.edu
na64.shared.blitztesting.com
na64.tmr.blitztesting.com
owners.conairgroup.com
pardot.yorktownfunds.com
pardoteef.encinacapital.com
parents.uci.edu
platform.pointcare.com
portal.urbanteachers.org
prod.2.slot.cdn.salesforce-communities.com
professional.alphanet.org
reunion.uci.edu
rhfactest.rickhansen.com
sales.grayshift.com
serviceprovider.purplesense.org
sfcdn.cypress.courses
source.netguru.com
subscriber.alphanet.org
success-test.exponentpartners.com
suppliers.appfolioinc.com
support-research.sambanova.ai
support.sambanova.ai
tammberlin.wine
visit.profysio.ee
webservices.telekom-dienste.de
www.bfrg.alphanet.org
www.hdc.hyundai.fr
www.olegforce.com
www.professional.alphanet.org
www.subscriber.alphanet.org
www.vrtxmedical.com
www3.bellevuecollege.edu

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.2.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xx3NAyYiz6swn3qiWKR
QJk1tnkyYwcBCsVBikg9eo8ynhSURtZIcPrLt9kIlRuIH7X919QpPd1fWkh/jd/W
+pQ9ecT6PAUSw7BhdFpMpVNCT08KeNpMz4M7QaIp3UGBHyGiKqOpDq8/GQehWUSS
lHQ28BnxEoYNWPXgI0SDAWAXWqNJoVQRNIMDUjw23pR8IyonS2pSS5R5+25S6Qo2
R4HDgh+VGrc11xjuxK+r5zDTCAx4a44nfo6hbSa4+U+WpdF5odRSjqEKsYTHxC+A
nielrlY7eQII8F8dsaTy6nIePDPNzodieCG1i0qT9C+OYi5qwb/imm/Bni8Uq85E
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341994687032100726698905032521410956939367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 06:19:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 06:19:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26650319277078879694412943147035368290007335230077367623802196640547020161987310798424470021876030429996828718988101527178412152362360080701944520470269972632256628970938440177101378591839833059359780076564137432620712609514253745264409918680688823470545638573783752358869933240217582071993848107231769392399021040157514947580373235147292885506405182993023919465780236818490820334856680419261662106712285307138266961436694961029288729006977674004009962985319568352892927595756434134182319459851128984963530015738961599995576933947730561066752334600209807063254249597412628287120657114517790791275229621569359872672769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3047d8f69f26d74734d7bd531d8981ce41f9db65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankauf.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apn.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalyst-dev.ctlyst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu32.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na122.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na64.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na91.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na93.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sahkolaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communities.deluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.athenasoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.calcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.macdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mail.thron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.maxex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.bionic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.litmus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.zscaler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgwarranty.doveresg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clearbanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.merchant.quadpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.aaup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bethematch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myactivities.educationfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myamgen.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycommunity.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywharton.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na64.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na64.tmr.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owners.conairgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.yorktownfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardoteef.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parents.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.pointcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.urbanteachers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhfactest.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.grayshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceprovider.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdn.cypress.courses'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.netguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success-test.exponentpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppliers.appfolioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-research.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammberlin.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.profysio.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.telekom-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdc.hyundai.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olegforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrtxmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.bellevuecollege.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189fd36da140000040300473045022100dfa9466a4c128d9a6e385e7f53c1d442c9dd2c1603de9855da0e78e8aa04638302201cf56d014c12b5db809e941c103c390896222201d83c5310af883ebd88b358de007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189fd36da290000040300473045022100ca35685f94076f29225b9ad4ac4a58409ed9b1e845520a47ada5bb6de6b63f5b0220435266762db7d43e3806676851b4da7111ebf5d42cbec71bca124fc8624c227a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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