prod.28.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:49:b9:9d:e9:9a:f0:a6:4c:50:83:af:21:be:6c:58:5c:1d was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.28.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:b9:9d:e9:9a:f0:a6:4c:50:83:af:21:be:6c:58:5c:1d
Serial Number (int): 286424197688413299299587105122276322335773
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:14:2a:ab:09:27:54:af:a8:aa:03:dc:d2:52:04:31:f5:e2:a8:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 51:4f:67:36:23:19:03:4a:96:ca:5b:47:d5:b3:72:c1:46:6a:41:4e
Fingerprint (sha256): 0c:8c:0f:fc:62:61:2f:c0:ef:8f:6a:a8:02:b4:49:c6:a5:28:e7:34:d0:a1:08:19:ec:44:03:0f:db:dc:87:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.28.slot.cdn.salesforce-communities.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.28.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admincamp.escortia.net
app.prachq.com
app.praxsuite.com
cdn.ap13.blitztesting.com
cdn.ap3.blitztesting.com
cdn.eu35.blitztesting.com
cdn.eu38.blitztesting.com
cdn.na125.blitztesting.com
cdn.na97.blitztesting.com
cms.evolis.com
cms.globalopticsdemo.tk
cms.iba-dosimetry.com
cms.lhdbenefits.com
community.circles-concierge.com
community.delight.fit
community.good-sellers.com
community.murata.com
ent.circles-concierge.com
erp.isid.co.jp
files.goodsalespromotion.jp
forcehour.imbar.co
gsclub.gardenstory.jp
help.evbox.com
help.nfnl2.work
help.zyfexx.com
helpcenter.trackunit.com
idp.anotherdomainsp.tk
info.paycaptain.com
ir.k-springboard.com
irm.k-springboard.com
kundenportal.daheim-solar.de
kundentest.daheim-solar.de
members.tia.org.nz
nominate.vinsoftware.xyz
pardot.internet.asn.au
pardotemail.genomind.com
partner.ebis.ne.jp
partner.evbox.com
partners.upes.ac.in
portal.vevromerike.no
prod.28.slot.cdn.salesforce-communities.com
resources.canva.com
s-em.mylearningonline.com.au
salesforce-cms.aquilliance.de
salesforce.displaywise.com.au
salesforce.silvern.net
salesforce2.silvern.net
salesforce3.silvern.net
salesforce4.silvern.net
salesforce5.silvern.net
salesforce6.silvern.net
salesforce7.silvern.net
salesforce8.silvern.net
saninet.sanifair.de
site.techceed-ops.com
support.averna.com
support.ebis.ne.jp
support.escortia.net
supporter.ea.greenpeace.org
survey.delight.fit
updates.teammed.com.au
www.amazon-gcatech.com
www.iwasedatabase.jp
www.k-springboard.com
www.wellnessfoods.jp
www3.inlite.com.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.28.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILXzCCCkegAwIBAgISA0m5nema8KZMUIOvIb5sWFwdMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMDkwOTA3MDBaFw0yMTA2MDcwOTA3MDBaMDYxNDAyBgNVBAMT
K3Byb2QuMjguc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNEQTFG3iE0BFqWLQby0a6XAD
gv9vkhKAqL1DIOp5EnkWDB834ksV1PuDR8v+n1kIJhYvlgW8RuzL1z4kCMLsTWt7
Fuogt0r5SUQgjuhfmHg9ipSzsXOrtUApmBiXG1j9+/XMxBTFXtbC4CBPUYlCMK7w
/ftgDynmUhRYrgJY3q1TfTupwZYgaEFHhFX7WyXF/GaHqD180f3x1VP3KqpqbDK0
oXgByVhX73Wz42gWVqXw2rbGdIGl4C1llnWz6QlmC2upDKhUxpCO9pxR04ZOP4tQ
Rt7OOOlxd6EKzQ1Peg0dltpU1epAPLo9cs9/eQoSvtO7JnEChKirT/LdG+KlAgMB
AAGjgghpMIIIZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKEUKqsJJ1SvqKoD3NJS
BDH14qg0MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGNgYDVR0RBIIGLTCCBimC
FmFkbWluY2FtcC5lc2NvcnRpYS5uZXSCDmFwcC5wcmFjaHEuY29tghFhcHAucHJh
eHN1aXRlLmNvbYIZY2RuLmFwMTMuYmxpdHp0ZXN0aW5nLmNvbYIYY2RuLmFwMy5i
bGl0enRlc3RpbmcuY29tghljZG4uZXUzNS5ibGl0enRlc3RpbmcuY29tghljZG4u
ZXUzOC5ibGl0enRlc3RpbmcuY29tghpjZG4ubmExMjUuYmxpdHp0ZXN0aW5nLmNv
bYIZY2RuLm5hOTcuYmxpdHp0ZXN0aW5nLmNvbYIOY21zLmV2b2xpcy5jb22CF2Nt
cy5nbG9iYWxvcHRpY3NkZW1vLnRrghVjbXMuaWJhLWRvc2ltZXRyeS5jb22CE2Nt
cy5saGRiZW5lZml0cy5jb22CH2NvbW11bml0eS5jaXJjbGVzLWNvbmNpZXJnZS5j
b22CFWNvbW11bml0eS5kZWxpZ2h0LmZpdIIaY29tbXVuaXR5Lmdvb2Qtc2VsbGVy
cy5jb22CFGNvbW11bml0eS5tdXJhdGEuY29tghllbnQuY2lyY2xlcy1jb25jaWVy
Z2UuY29tgg5lcnAuaXNpZC5jby5qcIIbZmlsZXMuZ29vZHNhbGVzcHJvbW90aW9u
LmpwghJmb3JjZWhvdXIuaW1iYXIuY2+CFWdzY2x1Yi5nYXJkZW5zdG9yeS5qcIIO
aGVscC5ldmJveC5jb22CD2hlbHAubmZubDIud29ya4IPaGVscC56eWZleHguY29t
ghhoZWxwY2VudGVyLnRyYWNrdW5pdC5jb22CFmlkcC5hbm90aGVyZG9tYWluc3Au
dGuCE2luZm8ucGF5Y2FwdGFpbi5jb22CFGlyLmstc3ByaW5nYm9hcmQuY29tghVp
cm0uay1zcHJpbmdib2FyZC5jb22CHGt1bmRlbnBvcnRhbC5kYWhlaW0tc29sYXIu
ZGWCGmt1bmRlbnRlc3QuZGFoZWltLXNvbGFyLmRlghJtZW1iZXJzLnRpYS5vcmcu
bnqCGG5vbWluYXRlLnZpbnNvZnR3YXJlLnh5eoIWcGFyZG90LmludGVybmV0LmFz
bi5hdYIYcGFyZG90ZW1haWwuZ2Vub21pbmQuY29tghJwYXJ0bmVyLmViaXMubmUu
anCCEXBhcnRuZXIuZXZib3guY29tghNwYXJ0bmVycy51cGVzLmFjLmlughVwb3J0
YWwudmV2cm9tZXJpa2Uubm+CK3Byb2QuMjguc2xvdC5jZG4uc2FsZXNmb3JjZS1j
b21tdW5pdGllcy5jb22CE3Jlc291cmNlcy5jYW52YS5jb22CHHMtZW0ubXlsZWFy
bmluZ29ubGluZS5jb20uYXWCHXNhbGVzZm9yY2UtY21zLmFxdWlsbGlhbmNlLmRl
gh1zYWxlc2ZvcmNlLmRpc3BsYXl3aXNlLmNvbS5hdYIWc2FsZXNmb3JjZS5zaWx2
ZXJuLm5ldIIXc2FsZXNmb3JjZTIuc2lsdmVybi5uZXSCF3NhbGVzZm9yY2UzLnNp
bHZlcm4ubmV0ghdzYWxlc2ZvcmNlNC5zaWx2ZXJuLm5ldIIXc2FsZXNmb3JjZTUu
c2lsdmVybi5uZXSCF3NhbGVzZm9yY2U2LnNpbHZlcm4ubmV0ghdzYWxlc2ZvcmNl
Ny5zaWx2ZXJuLm5ldIIXc2FsZXNmb3JjZTguc2lsdmVybi5uZXSCE3NhbmluZXQu
c2FuaWZhaXIuZGWCFXNpdGUudGVjaGNlZWQtb3BzLmNvbYISc3VwcG9ydC5hdmVy
bmEuY29tghJzdXBwb3J0LmViaXMubmUuanCCFHN1cHBvcnQuZXNjb3J0aWEubmV0
ghtzdXBwb3J0ZXIuZWEuZ3JlZW5wZWFjZS5vcmeCEnN1cnZleS5kZWxpZ2h0LmZp
dIIWdXBkYXRlcy50ZWFtbWVkLmNvbS5hdYIWd3d3LmFtYXpvbi1nY2F0ZWNoLmNv
bYIUd3d3Lml3YXNlZGF0YWJhc2UuanCCFXd3dy5rLXNwcmluZ2JvYXJkLmNvbYIU
d3d3LndlbGxuZXNzZm9vZHMuanCCEnd3dzMuaW5saXRlLmNvbS5hdTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2
AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAABeBZ0PpUAAAQDAEcw
RQIgdCCyD4QAxk17c+hqz1hIxp+4SdcPZRM8YPBkkD5yi6ECIQC3XnIYBwKpgFGD
r1gsxf0ngqcaGn34PfoP2kK/1U7nnAB3APZclC/RdzAiFFQYCDCUVo7jTRMZM7/f
DC8gC8xO8WTjAAABeBZ0Pw8AAAQDAEgwRgIhAK9CEoQAlnmjiT4QJheRjpczHDg1
pSinQBZ8YuGrcRdlAiEAsl3jbbYb5SvO4agNSJfFBWhH/IdDpSPROqZN7WN5s9Qw
DQYJKoZIhvcNAQELBQADggEBALaK/vk4g45aid1oUuaU3jxZhG+LiMQjkZTDCquB
ksu3HNYFdUTvQib9R/mAOA63zoAC93kipKFy+dUEy49fKZZFXgyByVKUW/SGxSBI
WRQpa1lw8kGnmnai8y0q0RfX8dMazKyrzIvy+4URnmF4Q48HLuci7hFOjMqko910
WDKPI61CqNgIPZ2PHsoKaftIMJ9h6tX4T1EaXvRjvOUOkzti+tRip/5F+P38r31Y
ypMfdunq6SdsWEKF5kwe6VfvOMk2GfrBknio/x7GmzDarTbuiet/u3o8fbtvr6D+
Qx4yl8iEM4Q2+RCUMWccXmwKP21P9dGHxSLMVKU1nw04/m0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTREExRt4hNARali0G8t
GulwA4L/b5ISgKi9QyDqeRJ5FgwfN+JLFdT7g0fL/p9ZCCYWL5YFvEbsy9c+JAjC
7E1rexbqILdK+UlEII7oX5h4PYqUs7Fzq7VAKZgYlxtY/fv1zMQUxV7WwuAgT1GJ
QjCu8P37YA8p5lIUWK4CWN6tU307qcGWIGhBR4RV+1slxfxmh6g9fNH98dVT9yqq
amwytKF4AclYV+91s+NoFlal8Nq2xnSBpeAtZZZ1s+kJZgtrqQyoVMaQjvacUdOG
Tj+LUEbezjjpcXehCs0NT3oNHZbaVNXqQDy6PXLPf3kKEr7TuyZxAoSoq0/y3Rvi
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286424197688413299299587105122276322335773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-09 09:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-07 09:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22369953262821824653456116827119894139755946524863057325560074934387488103497840377421552758857572852867832590785611149335458924713594703203211135350204496659452737567688094494665332664277399984525325340200657036207303832572496102847705476714643359700114246990381452219165843140406028659025061504967748734698620492380628976876820430364807704193240364318391388128514143939504639137343235101279651502689743895701592741658615721867429610040227302813823174345249752016723223608369552018329097698495895096035565228892497859086279168197870787694714797722845547955610418194833739954803044525349283920358066609880966870327973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1142aab092754afa8aa03dcd2520431f5e2a834
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admincamp.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.prachq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.praxsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap13.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu35.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu38.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na125.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na97.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.evolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.globalopticsdemo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.iba-dosimetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lhdbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.circles-concierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.good-sellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.murata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ent.circles-concierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.isid.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.goodsalespromotion.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forcehour.imbar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsclub.gardenstory.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nfnl2.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.zyfexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.trackunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.anotherdomainsp.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.paycaptain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irm.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundentest.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.tia.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.vinsoftware.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.internet.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotemail.genomind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.upes.ac.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vevromerike.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.canva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-em.mylearningonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce-cms.aquilliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.displaywise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce2.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce3.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce4.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce5.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce6.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce7.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce8.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saninet.sanifair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techceed-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.averna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.ea.greenpeace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.teammed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon-gcatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwasedatabase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfoods.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.inlite.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017816743e95000004030047304502207420b20f8400c64d7b73e86acf5848c69fb849d70f65133c60f064903e728ba1022100b75e72180702a9805183af582cc5fd2782a71a1a7df83dfa0fda42bfd54ee79c007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017816743f0f0000040300483046022100af421284009679a3893e102617918e97331c3835a528a740167c62e1ab711765022100b25de36db61be52bcee1a80d4897c5056847fc8743a523d13aa64ded6379b3d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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