*.eu27.force.com

- salesforce.com, inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:79:b4:15:02:d5:fc:76:d3:75:4c:33:41:07:46:bf was issued on by DigiCert Inc.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

salesforce.com, inc.

Organization: salesforce.com, inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:79:b4:15:02:d5:fc:76:d3:75:4c:33:41:07:46:bf
Serial Number (int): 11265744384559774674037305205011728063
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:08:21:b3:1a:9b:38:8a:06:b1:b4:b7:06:23:6e:77:d4:f2:fd:64
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6c:9a:55:47:dd:07:54:a8:67:e5:cd:e0:ef:1a:7f:5c:ca:4b:d5:8b
Fingerprint (sha256): 00:9d:91:43:3d:04:f2:9b:58:6a:7b:e9:86:4d:ce:56:57:75:00:12:74:e6:2a:ff:45:39:a9:0f:fa:03:3f:7f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.eu27.force.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eu27.force.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eu27.force.com
*.a.forceusercontent.com
*.builder.salesforce-communities.com
*.c.forceusercontent.com
*.cloudforce.com
*.container.lightning.com
*.d.forceusercontent.com
*.database.com
*.documentforce.com
*.eu27.content.force.com
*.eu27.visual.force.com
*.force.com
*.lightning.force.com
*.livepreview.salesforce-communities.com
*.my.salesforce.com
*.preview.salesforce-communities.com
*.secure.force.com
*.visualforce.com
cloudatlas.salesforce.com
services.salesforce.com

Other certificates including the domain name force.com

(limited to 100 certificates)
*.cs109.force.com
dev1-uswest2.hmr2.falcondevtip.c.pc-rnd.pc-aws.force.com
sfdc-58ktaz.sandbox.vf.force.com
*.cs54.force.com
*.cs73.force.com
*.cs55.force.com
*.na151.force.com
*.cs3.force.com
*.na202.force.com
*.cs18.force.com
*.cs54.force.com
*.na2.force.com
*.na85.force.com
performance-us-01.scrt.sfdc.sh
embedded.demo.pardot.force.com
*.eu27.force.com
*.na12.force.com
*.cs30.force.com
*.na127.force.com
*.cs81.force.com
*.na14.force.com
sdb1.test1-uswest2.visual.fit1.pc-rnd.pc-aws.force.com
performance-us-02.scrt.sfdc.sh
*.na64.force.com
*.cs57.force.com
*.cs34.force.com
*.na72.force.com
salesforce.com
lo2.my.lightning-container.com
*.ap0.force.com
*.na36.force.com
*.cs81.force.com
*.na36.force.com
*.na107.force.com
*.na86.force.com
mobile1.t.force.com
*.eu46.force.com
*.cs4.force.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
*.cs15.force.com
*.cs173.force.com
*.eu25.force.com
*.na18.force.com
*.na74.force.com
*.na38.force.com
*.na137.force.com
*.na1.force.com
iad.my.lightning-container.com
*.na35.force.com
*.cs25.force.com
*.cs125.force.com
dev1-uswest2.hmr2.falcondevtip.c.pc-rnd.pc-aws.force.com
*.cs67.force.com
can8s.visual.sfdc-58ktaz.force.com
*.na121.force.com
*.na15.force.com
aus24s.lightning.sfdc-vwfla6.force.com
*.ap15.force.com
sec-b2b.my.salesforce.com
sfdc-vwfla6.lightning.force.com
*.eu26.force.com
sec-b2b.my.salesforce.com
*.cs344.force.com
*.na36.force.com
aus5.sfdc-vwfla6.force.com
*.ap5.force.com
*.eu28.force.com
ora2s.dev1-uswest2.content.dev1.pc-rnd.pc-aws.force.com
*.na38.force.com
usa358.sfdc-yfeipo.force.com
na44-blitz02.soma.salesforce.com
*.na208.force.com
*.na12.force.com
perf1-useast2.perf2o.ld.pc-rnd.pc-aws.force.com
*.ap123456.force.com
*.na76.force.com
*.eu15.force.com
*.na215.force.com
*.cs57.force.com
*.cs224.force.com
sfdc-lywfpd.secure.force.com
*.ap5.force.com
salesforce.com
viv2.force.com
sfdc-yfeipo.force.com
*.cs77.force.com
*.na36.force.com
*.eu30.force.com
*.um7.force.com
deu54.sfdc-yzvdd4.force.com
*.na66.force.com
*.na14.force.com
*.cs90.force.com
*.cs98.force.com
*.na69.force.com
*.na36.force.com
ia6.sandbox.file.force.com
salesforce.com

Certificate

The complete raw certificate details for *.eu27.force.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIpTCCB42gAwIBAgIQCHm0FQLV/HbTdUwzQQdGvzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEwMjYwMDAwMDBa
Fw0yNDEwMjMyMzU5NTlaMHQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9y
bmlhMRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMR0wGwYDVQQKExRzYWxlc2ZvcmNl
LmNvbSwgaW5jLjEZMBcGA1UEAwwQKi5ldTI3LmZvcmNlLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMJB9VRxU+XDL5ctR1ZoZ2KAelnx8QCIfCKb
XwVKMzXbZRG0emMKbKMgUYiaiT8SQT5abf79OOhzoQPQKlYE1dmZP6Dac8ud/Ryg
DA6e9ntPdRKGLBQuMDxKG8cPf4TvswTNBhioSsD5++j+N8iTbL8PgwFjgXbL8A3d
7Awf0RITxd6bJN1MEUIAN4SyzVIYjiZng3GytLb7RBu6tU8vhMCEBe2eqiJQoXWr
6HCJKtLKa/zSfncrBmn1GfxO54ljT6NR51U8ONmTHt4qMd9HrhAdjH6nk6iqlsKx
ugSiCAQWE4+IuXzfsZcQlWdyewZ94va4RzCwXTFnPsgGX5nglqECAwEAAaOCBVYw
ggVSMB8GA1UdIwQYMBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBT/
CCGzGps4igaxtLcGI2531PL9ZDCCAfwGA1UdEQSCAfMwggHvghAqLmV1MjcuZm9y
Y2UuY29tghgqLmEuZm9yY2V1c2VyY29udGVudC5jb22CJCouYnVpbGRlci5zYWxl
c2ZvcmNlLWNvbW11bml0aWVzLmNvbYIYKi5jLmZvcmNldXNlcmNvbnRlbnQuY29t
ghAqLmNsb3VkZm9yY2UuY29tghkqLmNvbnRhaW5lci5saWdodG5pbmcuY29tghgq
LmQuZm9yY2V1c2VyY29udGVudC5jb22CDiouZGF0YWJhc2UuY29tghMqLmRvY3Vt
ZW50Zm9yY2UuY29tghgqLmV1MjcuY29udGVudC5mb3JjZS5jb22CFyouZXUyNy52
aXN1YWwuZm9yY2UuY29tggsqLmZvcmNlLmNvbYIVKi5saWdodG5pbmcuZm9yY2Uu
Y29tgigqLmxpdmVwcmV2aWV3LnNhbGVzZm9yY2UtY29tbXVuaXRpZXMuY29tghMq
Lm15LnNhbGVzZm9yY2UuY29tgiQqLnByZXZpZXcuc2FsZXNmb3JjZS1jb21tdW5p
dGllcy5jb22CEiouc2VjdXJlLmZvcmNlLmNvbYIRKi52aXN1YWxmb3JjZS5jb22C
GWNsb3VkYXRsYXMuc2FsZXNmb3JjZS5jb22CF3NlcnZpY2VzLnNhbGVzZm9yY2Uu
Y29tMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9j
cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5j
cmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JT
QVNIQTI1NjIwMjBDQTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzAB
hhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9j
YWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEt
MS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLayJTJgAABAMARzBF
AiEA8SBEMRISyTYV1Z0I3/oaa2jWNK7cOE95Rrq19r+JDQACIBKsHHROr3FEmvQ0
snouo6q/vJbts+1giv9mo390vKg2AHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGLayJS1AAABAMARzBFAiEAx3WS4oxzQXP/RyuKmUuWcCUyB4SS
U5022h9py5k13+ECIDj0529Khll9lb9GPZCE3hnCbf+lPIfXnCRpZ2pdnb9qAHYA
2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLayJSswAABAMARzBF
AiBQBCuU2aJ0CmXteFqOaXAMZOPqT2rkA0p2SNXVAXgF8AIhAK53PRyWBvwO3Q42
ZAXfZLkEJZzZ22BcxEqwBQ99t4cTMA0GCSqGSIb3DQEBCwUAA4IBAQBCH0T3sNQn
5Dhb4+NoNOjouYXttT9M9VJWyTiAaZ/JwJ5lv+lsDd1bsU6vQm44cB9FCY83SI4+
s0TwyxMqCjYMqg0XO/JPGlKh8+9J0CsWFJxUGa/wU7TOV3KiKRwvEMcv/Q+bOnaT
O3Z1zTukrRpDtPEe/YdXVt9sj1OYTWAeBlXggV1CXibXQeoAL+zgojt1nwVctbad
46QMrY5WLQ/SR0A0MRXq3y31pKltzCBLpgYomyUf71eXdyr/kn73RlcUxdgoLL0x
GXmN40hW3t/pbvcf1EPXOp4X+yHHsgACxt3IoMl2uXuVqZ8aXTRmCAJ0YUke/JN6
sZB4eigO7NuL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkH1VHFT5cMvly1HVmhn
YoB6WfHxAIh8IptfBUozNdtlEbR6YwpsoyBRiJqJPxJBPlpt/v046HOhA9AqVgTV
2Zk/oNpzy539HKAMDp72e091EoYsFC4wPEobxw9/hO+zBM0GGKhKwPn76P43yJNs
vw+DAWOBdsvwDd3sDB/REhPF3psk3UwRQgA3hLLNUhiOJmeDcbK0tvtEG7q1Ty+E
wIQF7Z6qIlChdavocIkq0spr/NJ+dysGafUZ/E7niWNPo1HnVTw42ZMe3iox30eu
EB2MfqeTqKqWwrG6BKIIBBYTj4i5fN+xlxCVZ3J7Bn3i9rhHMLBdMWc+yAZfmeCW
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11265744384559774674037305205011728063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salesforce.com, inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eu27.force.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24522756423113745045676772499995661165064508136312306975666342159182067512894732329085923937919973278181243639629028987981406743523699270883735841051785786045163496092877484897339413256286096396580088620359919889857997216172177962955666710908892816005767995785341286549428216641583382803615809973862085120003097013893472006168152125259479332075072835641825060515055962268311711124143066858592960292883778347219134312197211881967680069585663894589199351575310919182024932877391756928028244301512283953432331685515669481141770663778340180152342547410205533458225213734577687723346956046850575865421961713938749265581729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff0821b31a9b388a06b1b4b706236e77d4f2fd64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (499 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu27.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a.forceusercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.builder.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c.forceusercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.container.lightning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d.forceusercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.database.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documentforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu27.content.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu27.visual.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightning.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livepreview.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preview.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visualforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudatlas.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.salesforce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b6b2253260000040300473045022100f12044311212c93615d59d08dffa1a6b68d634aedc384f7946bab5f6bf890d00022012ac1c744eaf71449af434b27a2ea3aabfbc96edb3ed608aff66a37f74bca83600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b6b2252d40000040300473045022100c77592e28c734173ff472b8a994b96702532078492539d36da1f69cb9935dfe1022038f4e76f4a86597d95bf463d9084de19c26dffa53c87d79c2469676a5d9dbf6a007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b6b2252b30000040300473045022050042b94d9a2740a65ed785a8e69700c64e3ea4f6ae4034a7648d5d5017805f0022100ae773d1c9606fc0edd0e366405df64b904259cd9db605cc44ab0050f7db78713
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00421f44f7b0d427e4385be3e36834e8e8b985edb53f4cf55256c93880699fc9c09e65bfe96c0ddd5bb14eaf426e38701f45098f37488e3eb344f0cb132a0a360caa0d173bf24f1a52a1f3ef49d02b16149c5419aff053b4ce5772a2291c2f10c72ffd0f9b3a76933b7675cd3ba4ad1a43b4f11efd875756df6c8f53984d601e0655e0815d425e26d741ea002fece0a23b759f055cb5b69de3a40cad8e562d0fd24740343115eadf2df5a4a96dcc204ba606289b251fef5797772aff927ef7465714c5d8282cbd3119798de34856dedfe96ef71fd443d73a9e17fb21c7b20002c6ddc8a0c976b97b95a99f1a5d346608027461491efc937ab190787a280eecdb8b