prod.4.slot.cdn.salesforce-communities.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:05:7f:64:37:7c:3d:be:34:d5:93:93:c4:17:ee:c9:a6:dc was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.4.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:7f:64:37:7c:3d:be:34:d5:93:93:c4:17:ee:c9:a6:dc
Serial Number (int): 263207601940411898939428535754152936580828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:31:30:89:a9:cd:29:7c:b5:89:a1:49:90:7e:47:75:94:16:92:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:fd:04:31:86:fb:03:26:50:52:d3:19:8b:a8:54:d2:d0:f4:43:6e
Fingerprint (sha256): 0f:0a:d8:7c:e5:9e:38:1e:36:34:d7:52:1a:a9:fe:d4:44:b9:1c:07:26:dd:47:5e:e5:d8:d0:fd:db:94:b3:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prod.4.slot.cdn.salesforce-communities.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.4.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agent.smscor.com
bizconnect.gimasys.com
cares.paymaya.com
cdn.ap5.blitztesting.com
cdn.na52.blitztesting.com
certification.innovid.com
cloudcare.outintheclouds.com
cms.smscor.com
community.gofoundation.org.au
connect.jsa.org
content.tasland.org.au
content.thetcmgroup.com
crm.manhattancentury.com
customersupport.haivision.com
donate.avi.org.au
edirectory.novaonline.com
eform.novaonline.com
exchange.matillion.com
food.smscor.com
ftp.haivision.com
genpact.businesstalentgroup.com
help.binge.com.au
help.okansystem.jp
hub.sustainablebrands.com
lightning.dpsj.co.jp
members.ourwaparks.org.au
metlcommunity.matillion.com
new.hospitality.org.nz
nps.nikon.com.au
olympus.haivision.com
pardot.catercare.com.au
pardot.herrmannsolutions.asia
pardot.outintheclouds.com
partner.haivision.com
partnerportal.nordicfinance.com
partners.americasfoodfund.org
partnersupport.gradwell.com
parts.fleetpride.com
playground.oegen.co.uk
portal.foodsafety.com.au
premium.campmanyabogados.com
prod.4.slot.cdn.salesforce-communities.com
regulatorywatch.im.natixis.com
riaglass.marketcounsel.com
sales.smscor.com
salesforce.arabworldmedia.org
sf.smscor.com
support-stage2.haivision.com
support.haivision.com
support.marqlabs.com
support.mywave.cloud
support.plutora.com
support.savvas.com
support.singleplatform.com
support.stage.singleplatform.com
supportcenter.turnitin.com
supportcenterbeta.turnitin.com
supportcommunity.haivision.com
surveys.im.natixis.com
tcs365.paccar.com
test.marutisuzuki.com
timetracking.haivision.com
www.accommodation.org.nz
www.smepprogramme.org
www.systemiseme.nz
www2.fleetpride.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.4.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47whJ9Z8wmGnaLl+nkzX
F1Dws4b0R2Ds9zUBvScgYYGRmgdByicqaFUxDDYfqSAqgjkwMS5ERfDr3epxnMrW
z81cBsVmludEMKawDTbfJkjOjNCXP/g1ynQNC/5u1TA6RKgkCe6J5y0yRw5sHhgV
k0tFvj9jnSbL8F7KriDzyUFg9vTm4fonPVkC2ZW0Tx/tXtAO0U27Wfarkatrhz8C
Xp/oxX19bLIJ/OmwD0FZp+3MlvcJyPj3ehFwvioL/mzY1Rov81of9h330StNNdUX
JV8AIfL6Sts1z54b33L5st5/MweW6o9KMe0cu+Pwp3hOOURChKQWYgEJqugPmV9r
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263207601940411898939428535754152936580828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 17:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 17:42:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.4.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28748865348301197205502245628378571439058625362997702287785821650141405361714249710159430576083173346806529146578410024389788460104676526821786384470780671568891901049575309878325180606775385893887089673828685390349370612076052219715300993936457550074773243236023843920249220495608885227474661531661247155768157283847400694825766325815605904688199761453653428431951826342565459366501425728513940186829781955099383927304264205453833019984891754669573626170451437205591179182120968701062484270626237196620925579640372740357869270783435096342667810351601107289387817413168597630757189534173787292034649169604696105511739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a313089a9cd297cb589a149907e4775941692d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizconnect.gimasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cares.paymaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap5.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na52.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certification.innovid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudcare.outintheclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.gofoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.jsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.tasland.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.thetcmgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.manhattancentury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.avi.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edirectory.novaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eform.novaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.matillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genpact.businesstalentgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.binge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.okansystem.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.sustainablebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightning.dpsj.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.ourwaparks.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metlcommunity.matillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.hospitality.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.nikon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympus.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.catercare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.herrmannsolutions.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.outintheclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.nordicfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.americasfoodfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnersupport.gradwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parts.fleetpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.oegen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.foodsafety.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium.campmanyabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.4.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulatorywatch.im.natixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riaglass.marketcounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.arabworldmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-stage2.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.marqlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mywave.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.plutora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.savvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.singleplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stage.singleplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.turnitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenterbeta.turnitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcommunity.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.im.natixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcs365.paccar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marutisuzuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetracking.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accommodation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smepprogramme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.systemiseme.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.fleetpride.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017600b710f7000004030047304502203bd43786d8d350de569089766ce50da83a104e307076b52b9bbb652bd09910e0022100d1494330b9b258ac7ae9b2d87e09c2ea5e711d745e7dfb0bdd66a60be6b87444007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017600b71108000004030046304402203813ef02cb44ad4105e1cb1d7f95467e5f5cd7c8c25a620413eaf7a87f991dd20220259d60e49a81e3e06a4165038b87ec766d7f938a9604330b352c8b4378a2b4fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a9cff8ecf621af1982d3b3851ae22f0185ecda3719d31e0543c5f0ce8b5d631456f7bef2154f91d58ede94e64479b15e038f49ea9ff7c2e837049dd946e269a3749502e544d98c58fbdf7af08f6c54724c94fd601b6bd32614a18d2d2e7ae29c7a0ab426cd356bf083c7607d2106d4d3cb365d36e302dced87fcb2e17cc4358c1f0d60872e7f4aa0dda67d52e2df65e93bafedae74c0562207273f5a101fd929daa613d1135d6a0c7f5aebe10a007a022fbd247db848ceaad7db1370dbb46c736e0a1fbe6789e30dc2980006556cef40b9b27d5e820b5f7f0c5b994c1d7e3f88442fd4db41c455c911fe123f4d2d4ae06aac60bdef2153b1a4b692cdd5e5a00