prod.29.slot.cdn.salesforce-communities.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:21:58:fe:20:78:1b:9b:d5:5a:f9:25:8b:e4:18:97:13:09 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.29.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:58:fe:20:78:1b:9b:d5:5a:f9:25:8b:e4:18:97:13:09
Serial Number (int): 359796753401016127628694753211835909346057
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:f7:92:f1:26:14:56:e7:74:84:78:e8:ef:4e:4d:b9:c0:88:71:2a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:44:2f:05:e6:7e:8c:f3:82:cb:64:80:4d:70:f5:51:87:76:14:cd
Fingerprint (sha256): 04:b0:96:e9:1e:d5:eb:6f:91:0f:14:2c:94:09:6d:a2:f2:22:d9:6c:18:44:c7:cc:01:8f:ba:4a:f9:e3:c2:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prod.29.slot.cdn.salesforce-communities.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.29.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.acrotec.ch
coding.episource.com
community-beta.vtex.com
community.vtex.com
contactus.conagrabrands.com
customercontactus.conagrabrands.com
customerportal.interlacehealth.com
distribution.st.com
duncanhines.conagrabrands.com
faq.bmw.es
greenwire.greenpeace.org.uk
healthychoicecoupon.readyseteat.com
help.goheavy.co
helpcenter.conagrabrands.com
mk.marykayintouch.ua
my.diehardassurance.com
offres.beaba.com
p.trustpayments.com
partners.adyen.com
partners.n2media.com
prod.29.slot.cdn.salesforce-communities.com
restaurant.foodpanda.my
rlesa.repsol.com
salesforcecms.adstream.com
sf.cyberbusinessgrowth.com
sfc.terry.uga.edu
sponsor.continuvue.com
suite.cm.tourlane.com
support.exact.com
support.lavu.com
support.margindriver.com
support.n2media.com
support.zspace.com
uploads.episource.com
us.support.gohenry.com
www.diehardassurance.com
www.myindstore.com
www.restaurant.foodpanda.my
www.salesforce.nihr.ac.uk

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.29.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6quORKM5ODv3YGhB/ay7
xe+/lqDXr8WdAStr9hq720r2TYg32n31qSe05FNRDnAZXi2QTlPnnB/uM9ACMqN5
DWKu+Jj+lOFV/Q1vvk/YvLP4B9wzxki/6suXke6nTy6xZMZWe1/psI9YXgczunjY
u4gOubBN8+P7yCGLTD3BfiVQ6qYvew/TsNa8K4RvDra+Mr6SGsdQF7kahVg7nP29
118kLFD/t4EoWKPyTaEnPPhwMWvH218VI3MMc1e3nHeRv5bA1cw1rCthezGDeZmH
LK6Y3z1PFCouUk/E7GvStX3d9EN1VLn7YAyXxRk6TuWF2As2V72Qh6kHJ3W4ueB2
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359796753401016127628694753211835909346057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-17 05:19:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-15 05:19:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29624360647884703999260041269265519871895463862662008148449713240911809460036083847408467859262527176949273193073564724180649291344559140012079710256041997940316190929761290452617170691575517419369227085646440548196834224032481762653738162444156155634262289972128470090151048066415887319484117622604116231019464104851099766232421293422923562780786057031453523500719452641285040980877481498030204511109733025036593945981733870504681026546600308855254104358411000918530309940097322650576729154827289792775136159881794464772909949194617089078927394717910740733617547713577023448328083533562062780837356159924970572510761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83f792f1261456e7748478e8ef4e4db9c088712a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (957 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acrotec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-beta.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercontactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.interlacehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanhines.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwire.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthychoicecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.goheavy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offres.beaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.trustpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.adyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesa.repsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.adstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cyberbusinessgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.terry.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.continuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.cm.tourlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lavu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.margindriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.support.gohenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salesforce.nihr.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000175d4dba6800000040300483046022100effc408fa1e2ce5f775bc34fc2fdcf610b66818c59d10eeb31426b900f04dbbf02210094ad375a7242230ad904a7af2a1d9e8d1ba5c3fce2b8ac5e30812c154ff19163007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175d4dba66f000004030046304402206f5d71c4cd1194e8c451eb67602dd8183a0adb2ee7d7832bc9a0eb2d7b2b5de802206eb623106f5fcf753521713669759dc5a779706cd987cbbbfdd85c720ccf0be4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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