prod.5.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:93:4a:37:37:8d:ff:2b:cd:f3:64:ec:34:20:13:fb:1d:ac was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.5.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:4a:37:37:8d:ff:2b:cd:f3:64:ec:34:20:13:fb:1d:ac
Serial Number (int): 311457015307456668008345008082193980530092
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:65:92:5c:b6:bd:48:b9:34:e8:19:f7:7e:83:59:44:e0:eb:2c:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:12:51:25:b6:2d:ef:e8:73:c4:d3:7f:ba:35:80:bb:e4:e3:a7:ec
Fingerprint (sha256): 02:67:79:1c:db:88:5b:5f:ec:2b:f9:1e:d3:88:80:9a:45:d3:52:32:be:8f:36:f8:b2:7a:4d:8a:a9:47:6f:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.5.slot.cdn.salesforce-communities.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.5.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply.efacademy.com
auction.sompo-aux.com
benefits.arsdev.xyz
benefits.therecoveryvillage.com
cdn.ap15.blitztesting.com
cdn.eu39.blitztesting.com
cdn.na100.blitztesting.com
cdn.na120.blitztesting.com
cdn.na128.blitztesting.com
cdn.na137.blitztesting.com
cdn.na146.blitztesting.com
cdn.na153.blitztesting.com
cdn.na159.blitztesting.com
cdn.na68.blitztesting.com
cms.cssregtech.com
cms.iqera.news
community.srhealth.com
content.mranet.org
customers.sourcefurniture.com
customerservice.intel.cn
digital.apac.bgis.com
docs.trocco.io
email-builder.revolutionparts.com
empleos.neolith.com
force.usairfiltration.com
grants.charisfoundation.ca
hbxhelp.league.com
help.lexialearning.com
help.woolloo.com
images.visionsserviceadventures.com
jobs.neolith.com
kunde.vevromerike.no
login.hkairportrewards.com
marketing.nuageexperts.com
marketing.optirtc.com
matt242na128may3rdshared.blitztesting.com
na128.shared.blitztesting.com
na128.tmr.blitztesting.com
newportal.tribecapediatrics.com
newsletter.ebaraeurope.eu
pardot.edlong.com
pardot.redrockdiagnostics.com
pardot.visionps.com
partnerportal.pclawtimematters.com
partners.sourcefurniture.com
portal.marcelluscoalition.org
portal.shuttlewagon.com
portal.truewaterclaims.com
prod.5.slot.cdn.salesforce-communities.com
rpati.blitztesting.com
salesforce.tec.com.au
sfcms.afaxys.com
shared1.na128.cdnfoundation.blitztesting.com
smartknowledge.smtb.jp
support.makerbot.com
support.mbot.me
support.privy.id
support.subscription-store.com
testemailbuilder.sercante.com
v128.shared.blitztesting.com
vf.ars-sf.dev
www.cloudorcamarketing.com
www.jrealty.online
www.ukalumni.net

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.5.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoMiyP1oJeKujQ/+RNfQ
MXHo5G+vp6kizqV5QOaPRN2gqJ0gK1+dyBaa4DYONwhEmgfyyw8MzUZPRR3lNX0d
60+O5DxVPNW/AEOEu/VVhHfXd2jA/LcR4S1dSEt0/1fMR+etNHm80+vmNBJrQGlc
33Fc8vOjjN5Qas/CzmTR7SLme034PRZmejTawVFb6TcgkxPvFZO6DsJpjqvWCgzw
VU5WsmEXpGvYJR2sbhc2R0asc91hlQXxWcEubJG5RenLYxNysW8ri5zpDDJRlMPu
oEDMaw5cvIJA3HDCdmP25JHQrHsioPe5qL+sUzUlXk4mUYEjl5TZ3cb25/ai9wut
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311457015307456668008345008082193980530092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 14:27:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 14:27:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.5.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20010317696867328854061323396708103093044309695395518364576815389608504434793811907419176267479181165333081144085729606493586949536648319651430321867351568701389216432671502941101424554498021057343489709862817985560720734299569108893895998635016803041256621994129162765480901257840230488102728967895401285319063947992829434959062373549275547843317247621874584330805868448357915036930386113752372639245722109132011112670302802622388958778288704601121569674811801618303535136811912400441154326711526649497297404641101818585984274077814080270759311428194886635019336282701910090556137993363150643997293293253333047029133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2565925cb6bd48b934e819f77e835944e0eb2c98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1677 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.efacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auction.sompo-aux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.arsdev.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.therecoveryvillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap15.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu39.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na100.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na120.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na128.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na137.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na146.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na153.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na159.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na68.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cssregtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.iqera.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.srhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mranet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.sourcefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerservice.intel.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.apac.bgis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.trocco.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-builder.revolutionparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empleos.neolith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'force.usairfiltration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grants.charisfoundation.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbxhelp.league.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.lexialearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.woolloo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.visionsserviceadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.neolith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunde.vevromerike.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hkairportrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.nuageexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.optirtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matt242na128may3rdshared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na128.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na128.tmr.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportal.tribecapediatrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.ebaraeurope.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.edlong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.redrockdiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.visionps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.pclawtimematters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.sourcefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.marcelluscoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.shuttlewagon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.truewaterclaims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.5.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpati.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.tec.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.afaxys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared1.na128.cdnfoundation.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartknowledge.smtb.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.makerbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mbot.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.privy.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.subscription-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testemailbuilder.sercante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v128.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vf.ars-sf.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudorcamarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jrealty.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukalumni.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aebd9dfa900000403004730450220690fae6c9e48160c4b88dc554efa2ab5ab7064ec1a98f1b962821283b5a24902022100d3380033d7888cb7068eb937af5f7170fe4e90513877e18dd224533d3b4ec076007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aebd9dfa200000403004730450220750a433930b49018dda87598722d6d017b7598a6a5e8b53da799008b2fe7f197022100b294497c1a9da80a7434980dd6d506c3d6629c6319e3e65658ee44189f97ced8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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