prod.12.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:97:ba:4a:c2:8b:c0:86:a9:39:cb:07:e0:b4:7c:17:9d:a2 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.12.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:ba:4a:c2:8b:c0:86:a9:39:cb:07:e0:b4:7c:17:9d:a2
Serial Number (int): 400079405715145982114068144813193884573090
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:a9:23:73:97:7b:e5:b5:4d:47:95:94:d8:e9:85:1f:f6:a5:75:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:ef:d5:dc:b4:2d:c3:d6:0f:c6:d2:88:08:55:9e:ab:ae:aa:e7:8d
Fingerprint (sha256): 08:1c:fd:2e:70:1d:0c:c3:7c:be:4c:ee:91:c6:14:f8:d0:b2:a9:2a:f8:37:05:3d:a2:30:fd:f4:6c:70:6b:55

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.12.slot.cdn.salesforce-communities.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.12.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.inquirer.com
agency.nycers.org
articles.coronafacts.com
aws.nmb.gov
cdn.ap20.blitztesting.com
cdn.na21.blitztesting.com
cdn.na85.blitztesting.com
clients.lexmedicus.com.au
cms.classvipartners.com
cms.forensicanalytical.com
cms.ufm.edu
community.greencamps.org
community.ymcasf.org
compliance.liqid.de
consumidorfaq.eudora.com.br
contacts.bayareametro.gov
content.nbcuni.com
courtyard.law.ou.edu
email.truelearn.com
experts.lexmedicus.com.au
hello.addigy.com
help.stellainsurance.com.au
help.workgrid.com
helpdesk.edsurge.com
info.microbiologics.com
info.theretirementsolution.com
it.qqcw.us
itsc-demo-config.tanium.com
m.perkville.com
medical.nycers.org
members.cyber.nj.gov
my.airforce.com
my.ymcade.org
mynycers.nycers.org
njshield.njohsp.gov
ops.patientportalky.com
p.cbhhomes.com
pardot-uk.eu.vipre.com
pardot.beyondpay.com
pardot.lexmedicus.com.au
pardot.soljit.com
pardot.tdwilliamson.com
pardotcms.dbu.edu
partners.cyber.gov.au
partners.cyber.nj.gov
partners.panduit.com
partners.streamsets.com
pfhsfcms.jacksbasket.org
portal.coolgardie.wa.gov.au
preferredplayer.fila.com
prime.chrisstewart.com.au
prod.12.slot.cdn.salesforce-communities.com
retailer.charlottesweb.com
sales.optios.com
salesforce.jae.com
salesforce.koresoftware.com
salesforce.optios.com
sigma.sforcedemo.com
support.apricot.info
support.salsify.com
support.socialsolutions.com
support.stedwards.edu
tdwaccess.tdwilliamson.com
testsupport.stedwards.edu
www.agriskportal.com
www.clipperstartcard.com
www.cochezycia.com
www.communitytrustcafe.com
www.csiselementary.org
www.dornierdirect.com
www.icpmasterworkscommunity.com
www.lymi.fund
www.lymi.org

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.12.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIK6zCCCdOgAwIBAgISBJe6SsKLwIapOcsH4LR8F52iMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA0MjkxMDQ3MzVaFw0yMjA3MjgxMDQ3MzRaMDYxNDAyBgNVBAMT
K3Byb2QuMTIuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYA+QV5IQVQ75j8WCB9QzKxDi
fN4aodDnsv8CpABPxvOoQEvfKrdmxTPPyxJTEEF28VGe1QFsTiyzFt75/Rwu6NYk
VYgskxYwQALzTPhr+Y72xh82p5PidNzf+eQz74sQMNqOyTpbfhMt3++X5jj2a1Yb
T5NsgMisOEqs/CQ3JlqoVWPoyrDKtH7TRVvf06MX9KYVbIL8aJEmnGk4DgDtf4D7
+WwFKHwFX+kEtstm6NAglnb0RxGLVNXI1fj0XkNoHc5W6/p7/2XilwV0dVsHTPPu
qXtht/3wVicnMxTtIyzMjT3qNLBxAmYckQ6hSXd0Z9xLTGGjk+vjGgpDu3BnAgMB
AAGjggf1MIIH8TAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM+pI3OXe+W1TUeVlNjp
hR/2pXW7MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGtgYDVR0RBIIGrTCCBqmC
FGFjY291bnQuaW5xdWlyZXIuY29tghFhZ2VuY3kubnljZXJzLm9yZ4IYYXJ0aWNs
ZXMuY29yb25hZmFjdHMuY29tggthd3Mubm1iLmdvdoIZY2RuLmFwMjAuYmxpdHp0
ZXN0aW5nLmNvbYIZY2RuLm5hMjEuYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLm5hODUu
YmxpdHp0ZXN0aW5nLmNvbYIZY2xpZW50cy5sZXhtZWRpY3VzLmNvbS5hdYIXY21z
LmNsYXNzdmlwYXJ0bmVycy5jb22CGmNtcy5mb3JlbnNpY2FuYWx5dGljYWwuY29t
ggtjbXMudWZtLmVkdYIYY29tbXVuaXR5LmdyZWVuY2FtcHMub3JnghRjb21tdW5p
dHkueW1jYXNmLm9yZ4ITY29tcGxpYW5jZS5saXFpZC5kZYIbY29uc3VtaWRvcmZh
cS5ldWRvcmEuY29tLmJyghljb250YWN0cy5iYXlhcmVhbWV0cm8uZ292ghJjb250
ZW50Lm5iY3VuaS5jb22CFGNvdXJ0eWFyZC5sYXcub3UuZWR1ghNlbWFpbC50cnVl
bGVhcm4uY29tghlleHBlcnRzLmxleG1lZGljdXMuY29tLmF1ghBoZWxsby5hZGRp
Z3kuY29tghtoZWxwLnN0ZWxsYWluc3VyYW5jZS5jb20uYXWCEWhlbHAud29ya2dy
aWQuY29tghRoZWxwZGVzay5lZHN1cmdlLmNvbYIXaW5mby5taWNyb2Jpb2xvZ2lj
cy5jb22CHmluZm8udGhlcmV0aXJlbWVudHNvbHV0aW9uLmNvbYIKaXQucXFjdy51
c4IbaXRzYy1kZW1vLWNvbmZpZy50YW5pdW0uY29tgg9tLnBlcmt2aWxsZS5jb22C
Em1lZGljYWwubnljZXJzLm9yZ4IUbWVtYmVycy5jeWJlci5uai5nb3aCD215LmFp
cmZvcmNlLmNvbYINbXkueW1jYWRlLm9yZ4ITbXlueWNlcnMubnljZXJzLm9yZ4IT
bmpzaGllbGQubmpvaHNwLmdvdoIXb3BzLnBhdGllbnRwb3J0YWxreS5jb22CDnAu
Y2JoaG9tZXMuY29tghZwYXJkb3QtdWsuZXUudmlwcmUuY29tghRwYXJkb3QuYmV5
b25kcGF5LmNvbYIYcGFyZG90LmxleG1lZGljdXMuY29tLmF1ghFwYXJkb3Quc29s
aml0LmNvbYIXcGFyZG90LnRkd2lsbGlhbXNvbi5jb22CEXBhcmRvdGNtcy5kYnUu
ZWR1ghVwYXJ0bmVycy5jeWJlci5nb3YuYXWCFXBhcnRuZXJzLmN5YmVyLm5qLmdv
doIUcGFydG5lcnMucGFuZHVpdC5jb22CF3BhcnRuZXJzLnN0cmVhbXNldHMuY29t
ghhwZmhzZmNtcy5qYWNrc2Jhc2tldC5vcmeCG3BvcnRhbC5jb29sZ2FyZGllLndh
Lmdvdi5hdYIYcHJlZmVycmVkcGxheWVyLmZpbGEuY29tghlwcmltZS5jaHJpc3N0
ZXdhcnQuY29tLmF1gitwcm9kLjEyLnNsb3QuY2RuLnNhbGVzZm9yY2UtY29tbXVu
aXRpZXMuY29tghpyZXRhaWxlci5jaGFybG90dGVzd2ViLmNvbYIQc2FsZXMub3B0
aW9zLmNvbYISc2FsZXNmb3JjZS5qYWUuY29tghtzYWxlc2ZvcmNlLmtvcmVzb2Z0
d2FyZS5jb22CFXNhbGVzZm9yY2Uub3B0aW9zLmNvbYIUc2lnbWEuc2ZvcmNlZGVt
by5jb22CFHN1cHBvcnQuYXByaWNvdC5pbmZvghNzdXBwb3J0LnNhbHNpZnkuY29t
ghtzdXBwb3J0LnNvY2lhbHNvbHV0aW9ucy5jb22CFXN1cHBvcnQuc3RlZHdhcmRz
LmVkdYIadGR3YWNjZXNzLnRkd2lsbGlhbXNvbi5jb22CGXRlc3RzdXBwb3J0LnN0
ZWR3YXJkcy5lZHWCFHd3dy5hZ3Jpc2twb3J0YWwuY29tghh3d3cuY2xpcHBlcnN0
YXJ0Y2FyZC5jb22CEnd3dy5jb2NoZXp5Y2lhLmNvbYIad3d3LmNvbW11bml0eXRy
dXN0Y2FmZS5jb22CFnd3dy5jc2lzZWxlbWVudGFyeS5vcmeCFXd3dy5kb3JuaWVy
ZGlyZWN0LmNvbYIfd3d3LmljcG1hc3RlcndvcmtzY29tbXVuaXR5LmNvbYINd3d3
Lmx5bWkuZnVuZIIMd3d3Lmx5bWkub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ
Ca/s7akx+1cQ7g+5vujamwIM0J/yalF23ynW4gm3lvBzNlb+GDIOnObIPF4voZQ0
Gc+H2UsUYsiemvbhn/6YmQLursQ6tM8MGUxfluhpW7BFTIYbu77IcJnpUZGackfv
uM5OBJA4rQI1YvB2mRkc0j+iQhWr3J5QDjssYaGmAgZIRqe97Q9nygpLTtrbyCzE
4e2/OPD7ZVmYoWp/22Phn+Yndk9YqavQrrtu5InGAbmMz/xNioh+fiDvD6aQpQxb
C3tyiGPfmc+KM3Y25Mm3IpytS3fkNpX2mKQYEfGeFNiw8TL5qRTf9fB1VV6UYH8X
d+e8W2l8QmwJ2rf9XQDg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WAPkFeSEFUO+Y/FggfU
MysQ4nzeGqHQ57L/AqQAT8bzqEBL3yq3ZsUzz8sSUxBBdvFRntUBbE4ssxbe+f0c
LujWJFWILJMWMEAC80z4a/mO9sYfNqeT4nTc3/nkM++LEDDajsk6W34TLd/vl+Y4
9mtWG0+TbIDIrDhKrPwkNyZaqFVj6MqwyrR+00Vb39OjF/SmFWyC/GiRJpxpOA4A
7X+A+/lsBSh8BV/pBLbLZujQIJZ29EcRi1TVyNX49F5DaB3OVuv6e/9l4pcFdHVb
B0zz7ql7Ybf98FYnJzMU7SMszI096jSwcQJmHJEOoUl3dGfcS0xho5Pr4xoKQ7tw
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400079405715145982114068144813193884573090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-29 10:47:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 10:47:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27441081521737948737722742939194737841859999003631561378519836508000435624064346926643358924539772517004309864191972644359301973220507524297849488245081948962903647547309116039231502486242341647782534665897371153537243617430422061233293459589190541734545902962782464419493445827884081569454914779053499601501612773115024332976623352118378919626173950877751928968034780853797223541765282505607812488945845557268433797901239159149542663526408903195879228408055884994719357380031283619758443006518812131647137987268737120237484227343149958358502190422596328804940708070534656073262517610345558431396323009264079941103719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfa92373977be5b54d479594d8e9851ff6a575bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1709 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.inquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.coronafacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.nmb.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap20.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na85.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.classvipartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.forensicanalytical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ufm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.greencamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ymcasf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.liqid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumidorfaq.eudora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.bayareametro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtyard.law.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.truelearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.addigy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stellainsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.microbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.theretirementsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.qqcw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsc-demo-config.tanium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.perkville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ymcade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynycers.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njshield.njohsp.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.patientportalky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.cbhhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot-uk.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.beyondpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.soljit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotcms.dbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.panduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.streamsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfhsfcms.jacksbasket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.coolgardie.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferredplayer.fila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.chrisstewart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailer.charlottesweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.jae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.koresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.sforcedemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.apricot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.salsify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.socialsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdwaccess.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsupport.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriskportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clipperstartcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cochezycia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitytrustcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csiselementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dornierdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icpmasterworkscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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