prod.2.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:93:d5:a2:cf:a3:7a:0a:c5:9a:2e:c5:85:4b:4a:0a:66:9a was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.2.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:d5:a2:cf:a3:7a:0a:c5:9a:2e:c5:85:4b:4a:0a:66:9a
Serial Number (int): 311642336659262712431319729632943756961434
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:d2:d4:b9:b7:cf:bf:e2:0d:e2:94:eb:79:85:bc:e2:a4:55:e3:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:ba:12:de:47:19:6e:fc:29:91:db:6d:d7:b7:63:4e:4d:6d:37:78
Fingerprint (sha256): 0a:85:25:22:1f:a8:28:5f:16:75:b9:9e:ef:26:a4:5b:cb:76:3e:d1:81:ee:af:fd:5b:5a:d9:c1:8e:9b:65:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.2.slot.cdn.salesforce-communities.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.2.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankauf.ecary.de
apn.rickhansen.com
bfrg.alphanet.org
catalyst-dev.ctlyst.io
cdn.eu32.blitztesting.com
cdn.na122.blitztesting.com
cdn.na64.blitztesting.com
cdn.na91.blitztesting.com
cdn.na93.blitztesting.com
cms.encinacapital.com
cms.sahkolaitos.fi
cms.t-mobile.com
communities.deluxe.com
community.athenasoftware.net
community.calcpa.org
content.macdc.org
content.mail.thron.com
content.maxex.com
crm.ecary.de
customer.bionic.co.uk
customer.lendai.us
customers.litmus.io
customersupport.zscaler.com
esgwarranty.doveresg.com
harmony.purplesense.org
help.clearbanc.com
help.merchant.quadpay.com
help.wework.com
hive.sambanova.ai
members.aaup.org
mon.strigo.ca
my.bethematch.org
my.strigo.ca
myactivities.educationfoundation.org
myamgen.amgen.com
mycommunity.amgen.com
mywharton.wharton.upenn.edu
na64.shared.blitztesting.com
na64.tmr.blitztesting.com
owners.conairgroup.com
pardot.yorktownfunds.com
pardoteef.encinacapital.com
parents.uci.edu
platform.pointcare.com
portal.healthplm.com
portal.urbanteachers.org
prod.2.slot.cdn.salesforce-communities.com
professional.alphanet.org
reunion.uci.edu
rhfactest.rickhansen.com
sales.grayshift.com
serviceprovider.purplesense.org
sfcdn.cypress.courses
source.netguru.com
subscriber.alphanet.org
success-test.exponentpartners.com
suppliers.appfolioinc.com
support-research.sambanova.ai
support.sambanova.ai
survey.patientslikeme.com
tammberlin.wine
visit.profysio.ee
webservices.telekom-dienste.de
www.bfrg.alphanet.org
www.hdc.hyundai.fr
www.olegforce.com
www.professional.alphanet.org
www.subscriber.alphanet.org
www.vrtxmedical.com
www3.bellevuecollege.edu

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.2.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd+0EiFUG1qjZbr+zZDj
55SHT4X5atCy0AdUpsMeKB9yE/qDqXS31uyjAO1wEQwcfrB49tOWnkE5+S8xa4nA
IdyFjxHbabqc6BvXb5GRCI6uqgghhNwwaiib/mhsSfEFT1xNH7bT6Fsj/LrGNyH5
gTIu8obymJ8/cN2UZyhTMsMpqwyKtXJLagQ5ObzhEL5tDnNs/CNazDofyz+n1WiX
s9Aed3jb9rf+ll6tBT1/2pIBATudK+57YEX6iOSpkcLEWYqNtoZ9aPm/EtoqOYa5
76NDqFsReWz26AOZQZ0uT/+2l2kQmvO1GpT3FfYKsS+tc6p2e30/TjaC89G1mkKk
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311642336659262712431319729632943756961434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 16:05:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-22 16:05:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24979258337058756668200180844203975818677346534007222421000282430128396072438510781550436721444309197947723325503685302308713651224741527964898073416578477824982841097358515673554251544230387769822115599004178656684741498326729454291023581202769510517890883118531287212017236275480008777736610908104465328320621820863576136571114348932898418145638535005515267821692781509451546628743445798335879910835166598274580861950971845206198032664455654347776608925141497053205319352756036436315885979694496401839279913670953506741062714507678772504572764562585779919716612056106094289348683700615958050877593893343945394660489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddd2d4b9b7cfbfe20de294eb7985bce2a455e343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1675 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankauf.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apn.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalyst-dev.ctlyst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu32.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na122.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na64.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na91.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na93.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sahkolaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communities.deluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.athenasoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.calcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.macdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mail.thron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.maxex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.bionic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.litmus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.zscaler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgwarranty.doveresg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clearbanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.merchant.quadpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.aaup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bethematch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myactivities.educationfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myamgen.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycommunity.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywharton.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na64.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na64.tmr.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owners.conairgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.yorktownfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardoteef.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parents.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.pointcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.healthplm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.urbanteachers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhfactest.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.grayshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceprovider.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdn.cypress.courses'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.netguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success-test.exponentpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppliers.appfolioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-research.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.patientslikeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammberlin.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.profysio.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.telekom-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdc.hyundai.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olegforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrtxmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.bellevuecollege.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018988dd44880000040300463044022067d67b997d6347c776016a8b6e06da3d96e4409059d0b5bcfaeb43b5b462a5850220075825e2a3bd89feae7bd532a9026c37cb764e1934e4d2840b2058240fffe78e007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018988dd44ba0000040300483046022100d6b9fdb77583c240d1c375350f6d1f9abe2a724ecb3bc45e0f12c04de4cd5e7002210084e540e4b83db9946d9b34455c5009752b26286d295e8b02b77bc35e1fc68988
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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