prod.28.slot.cdn.salesforce-communities.com

Issued by R11

About this certificate

This digital certificate with serial number 03:1a:ab:73:9a:ed:6a:37:13:5a:64:56:dc:61:4b:66:d8:44 was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.28.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1a:ab:73:9a:ed:6a:37:13:5a:64:56:dc:61:4b:66:d8:44
Serial Number (int): 270412097578944117580954705344365152622660
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:0c:a4:d3:54:23:8b:b0:c6:51:68:74:3f:e0:4e:3d:9a:0d:d9:c6
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): c5:31:9c:b0:fe:01:52:94:30:e0:f0:1e:12:12:66:5a:dc:ed:d7:f7
Fingerprint (sha256): 07:fc:a4:40:96:0e:2a:d4:5f:6c:61:62:ca:53:21:44:c7:87:c9:5a:14:7f:e5:7a:ea:3f:34:c1:84:91:7f:ee

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate prod.28.slot.cdn.salesforce-communities.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.28.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admincamp.escortia.net
admisiones.estudiaronline.ucam.edu
apply.online.ku.ac.ke
cdn.ap13.blitztesting.com
cdn.ap3.blitztesting.com
cdn.eu35.blitztesting.com
cdn.eu38.blitztesting.com
cdn.na125.blitztesting.com
cdn.na97.blitztesting.com
cms.deetee.com
cms.iba-dosimetry.com
community.good-sellers.com
community.murata.com
eml.onemarketing.jp
files.goodsalespromotion.jp
help.evbox.com
help.nfnl2.work
helpcenter.trackunit.com
hub.online.ku.ac.ke
hub.online.uj.ac.za
hub.online.up.ac.za
images.redeapp.com
info.paycaptain.com
irm.k-springboard.com
kundenportal.daheim-solar.de
kundentest.daheim-solar.de
login.pecoeeportal.com
m.masterclass.com
members.tia.org.nz
pardot.internet.asn.au
pardotemail.genomind.com
partner.ebis.ne.jp
partner.evbox.com
partners.axi.com
partners.axiind.com
partners.upes.ac.in
portal.vevromerike.no
prod.28.slot.cdn.salesforce-communities.com
resources.canva.com
s-em.mylearningonline.com.au
salesforce.displaywise.com.au
salesforce2.silvern.net
salesforce3.silvern.net
salesforce4.silvern.net
salesforce7.silvern.net
saninet.sanifair.de
site.techceed-ops.com
support.averna.com
support.ebis.ne.jp
support.escortia.net
supporter.ea.greenpeace.org
survey.delight.fit
updates.teammed.com.au
vaxperf.askbutters.com
www.amazon-gcatech.com
www.iwasedatabase.jp
www.wellnessfoods.jp
www3.inlite.com.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.28.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxmm1hLKmzsitDof+0eN
/e2/oGsOYdSw9FeoDGA2VeFoBi8+idxE0m8+XT+CG+wPThu6OzhLN+RKf+1eLf1t
0N2EmWk1bGutklJWFl3vf/7j0AQNBm8ncoYIv+wVGpLheYCzKnrKpmcKk4gfVF1/
9nP71jFUbVLD56xpwDmVWJSzjnWQwX+MHfk49MG5Hp+xMncMXDUk54QSdAo6XMxS
fazYloQiHxcSbSSiybZOpN2yFGkOQyInIv7tu1UkCm6SMT0zG9pwglciAgn0w3wA
UWaaMh8i6XxT20Q+NWLNDTXLXdrY4nDGeUP7em4BHaYFadfAOxTx04k+OTcDvHjY
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270412097578944117580954705344365152622660
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 09:16:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 09:16:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21094446256021503567837876697783682967818420914512304693131922835442507388986741656287951919512849441552329715192628314142199749868327907756908879266078248506115367658374614268900697649553519635786293876995825400996836698956013855565827578794261609197343300395027866226776683416202618104389619227751987523958138908544679599320200333290122554025652733498754338697654664568994557339306916339979110087651009159915884331142617605221590064674892319503827404395802192500777589386182869479184987702916323970503724757742755887245423442455250079190012140985286196438821028560260274265927183538463149414467358671278749794228331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e40ca4d354238bb0c65168743fe04e3d9a0dd9c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1385 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admincamp.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admisiones.estudiaronline.ucam.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.online.ku.ac.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap13.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu35.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu38.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na125.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na97.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.deetee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.iba-dosimetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.good-sellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.murata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eml.onemarketing.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.goodsalespromotion.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nfnl2.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.trackunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.ku.ac.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.uj.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.up.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.redeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.paycaptain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irm.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundentest.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pecoeeportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.masterclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.tia.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.internet.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotemail.genomind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axiind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.upes.ac.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vevromerike.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.canva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-em.mylearningonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.displaywise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce2.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce3.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce4.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce7.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saninet.sanifair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techceed-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.averna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.ea.greenpeace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.teammed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxperf.askbutters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon-gcatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwasedatabase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfoods.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.inlite.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001902fff9a840000040300483046022100868db80eed15609f55efbd4e546ddb6a308a153362f8ee9ac5db31adc4c803b1022100a6c04e9f1c5049ec5a98b7f36e5ff572e974d3c22ce2183b36833bf85b84bdac00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001902fff9a81000004030046304402205e3b9e35b25e4e619c51403910c84ade48a29994008de3294058ac7fd1eed07802204fdcdd7922a015a12336310e5df5e857356a825fffb0b2fe7ee0b7190cfa4e68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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