prod.28.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:2f:90:3a:89:c7:c4:4e:e3:77:fa:c0:30:ec:88:d6:78:4c was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.28.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:90:3a:89:c7:c4:4e:e3:77:fa:c0:30:ec:88:d6:78:4c
Serial Number (int): 277521841819692945101297695530471289944140
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:e5:7b:21:d7:b3:ae:9a:10:a6:9b:50:94:3a:28:0e:c3:29:28:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:23:30:9e:69:c1:e0:fd:82:93:ce:9a:65:0a:0c:75:19:47:26:bc
Fingerprint (sha256): 13:1c:96:4e:bf:9b:95:16:57:00:e5:47:d6:4c:76:2b:27:2d:71:01:0f:79:d6:c8:80:83:28:a5:9f:e1:b3:0d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.28.slot.cdn.salesforce-communities.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.28.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admincamp.escortia.net
admisiones.estudiaronline.ucam.edu
admisiones.online.uco.es
app.prachq.com
app.praxsuite.com
care.intelenyx.com
cdn.ap13.blitztesting.com
cdn.ap3.blitztesting.com
cdn.eu35.blitztesting.com
cdn.eu38.blitztesting.com
cdn.na125.blitztesting.com
cdn.na97.blitztesting.com
cms.evolis.com
cms.globalopticsdemo.tk
cms.iba-dosimetry.com
cms.lhdbenefits.com
community.circles-concierge.com
community.delight.fit
community.good-sellers.com
community.murata.com
ent.circles-concierge.com
erp.isid.co.jp
files.goodsalespromotion.jp
forcehour.imbar.co
gsclub.gardenstory.jp
help.evbox.com
help.nfnl2.work
help.zyfexx.com
helpcenter.trackunit.com
hub.online.ku.ac.ke
hub.online.uj.ac.za
hue.savemepc.com
idp.anotherdomainsp.tk
info.paycaptain.com
ir.k-springboard.com
irm.k-springboard.com
kundenportal.daheim-solar.de
kundentest.daheim-solar.de
members.tia.org.nz
nominate.vinsoftware.xyz
pardot.internet.asn.au
pardotemail.genomind.com
partner.ebis.ne.jp
partner.evbox.com
partners.upes.ac.in
portal.vevromerike.no
prod.28.slot.cdn.salesforce-communities.com
resources.canva.com
s-em.mylearningonline.com.au
salesforce-cms.aquilliance.de
salesforce.displaywise.com.au
salesforce.silvern.net
salesforce2.silvern.net
salesforce3.silvern.net
salesforce4.silvern.net
salesforce5.silvern.net
salesforce6.silvern.net
salesforce7.silvern.net
salesforce8.silvern.net
saninet.sanifair.de
sf.acmp.net
site.techceed-ops.com
support.averna.com
support.ebis.ne.jp
support.escortia.net
supporter.ea.greenpeace.org
survey.delight.fit
updates.teammed.com.au
www.amazon-gcatech.com
www.iwasedatabase.jp
www.k-springboard.com
www.wellnessfoods.jp
www3.inlite.com.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.28.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL+TCCCuGgAwIBAgISAy+QOonHxE7jd/rAMOyI1nhMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMTUxODA4MzZaFw0yMTA2MTMxODA4MzZaMDYxNDAyBgNVBAMT
K3Byb2QuMjguc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+O+hPhP2c7dmiVVsZSh3r39Ci
FjDEZKhlRiBz1yxmmzCtHxFcPnyk/HgbXvNajcKGpFeLBjsUItovRnywAg0RyANo
4H56kkYDxV9ja3FJ8IIyz2Uam05IsAT7zkIu2t3r8zNBcfZBuyjsvPR/wvOpaD7v
+rK5IWDZ+QewvilZuuHA/2YA8IOLS1RUBDmTXkowVv2z+jNs3Ey57oXlbJ/0wuSe
N9Ub94+SEiKmz/Zh4sG7oCObxSGWWMGhziyP+2HTPpxbOiUeoqczTdg567h0utTO
0hiwFQ4tEE48OQnPwcvySg6Fi3rhjNRehl9mzFp1kK5fq9cQWSR4vpZfXDL/AgMB
AAGjggkDMIII/zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC7leyHXs66aEKabUJQ6
KA7DKShpMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIG0QYDVR0RBIIGyDCCBsSC
FmFkbWluY2FtcC5lc2NvcnRpYS5uZXSCImFkbWlzaW9uZXMuZXN0dWRpYXJvbmxp
bmUudWNhbS5lZHWCGGFkbWlzaW9uZXMub25saW5lLnVjby5lc4IOYXBwLnByYWNo
cS5jb22CEWFwcC5wcmF4c3VpdGUuY29tghJjYXJlLmludGVsZW55eC5jb22CGWNk
bi5hcDEzLmJsaXR6dGVzdGluZy5jb22CGGNkbi5hcDMuYmxpdHp0ZXN0aW5nLmNv
bYIZY2RuLmV1MzUuYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLmV1MzguYmxpdHp0ZXN0
aW5nLmNvbYIaY2RuLm5hMTI1LmJsaXR6dGVzdGluZy5jb22CGWNkbi5uYTk3LmJs
aXR6dGVzdGluZy5jb22CDmNtcy5ldm9saXMuY29tghdjbXMuZ2xvYmFsb3B0aWNz
ZGVtby50a4IVY21zLmliYS1kb3NpbWV0cnkuY29tghNjbXMubGhkYmVuZWZpdHMu
Y29tgh9jb21tdW5pdHkuY2lyY2xlcy1jb25jaWVyZ2UuY29tghVjb21tdW5pdHku
ZGVsaWdodC5maXSCGmNvbW11bml0eS5nb29kLXNlbGxlcnMuY29tghRjb21tdW5p
dHkubXVyYXRhLmNvbYIZZW50LmNpcmNsZXMtY29uY2llcmdlLmNvbYIOZXJwLmlz
aWQuY28uanCCG2ZpbGVzLmdvb2RzYWxlc3Byb21vdGlvbi5qcIISZm9yY2Vob3Vy
LmltYmFyLmNvghVnc2NsdWIuZ2FyZGVuc3RvcnkuanCCDmhlbHAuZXZib3guY29t
gg9oZWxwLm5mbmwyLndvcmuCD2hlbHAuenlmZXh4LmNvbYIYaGVscGNlbnRlci50
cmFja3VuaXQuY29tghNodWIub25saW5lLmt1LmFjLmtlghNodWIub25saW5lLnVq
LmFjLnphghBodWUuc2F2ZW1lcGMuY29tghZpZHAuYW5vdGhlcmRvbWFpbnNwLnRr
ghNpbmZvLnBheWNhcHRhaW4uY29tghRpci5rLXNwcmluZ2JvYXJkLmNvbYIVaXJt
Lmstc3ByaW5nYm9hcmQuY29tghxrdW5kZW5wb3J0YWwuZGFoZWltLXNvbGFyLmRl
ghprdW5kZW50ZXN0LmRhaGVpbS1zb2xhci5kZYISbWVtYmVycy50aWEub3JnLm56
ghhub21pbmF0ZS52aW5zb2Z0d2FyZS54eXqCFnBhcmRvdC5pbnRlcm5ldC5hc24u
YXWCGHBhcmRvdGVtYWlsLmdlbm9taW5kLmNvbYIScGFydG5lci5lYmlzLm5lLmpw
ghFwYXJ0bmVyLmV2Ym94LmNvbYITcGFydG5lcnMudXBlcy5hYy5pboIVcG9ydGFs
LnZldnJvbWVyaWtlLm5vgitwcm9kLjI4LnNsb3QuY2RuLnNhbGVzZm9yY2UtY29t
bXVuaXRpZXMuY29tghNyZXNvdXJjZXMuY2FudmEuY29tghxzLWVtLm15bGVhcm5p
bmdvbmxpbmUuY29tLmF1gh1zYWxlc2ZvcmNlLWNtcy5hcXVpbGxpYW5jZS5kZYId
c2FsZXNmb3JjZS5kaXNwbGF5d2lzZS5jb20uYXWCFnNhbGVzZm9yY2Uuc2lsdmVy
bi5uZXSCF3NhbGVzZm9yY2UyLnNpbHZlcm4ubmV0ghdzYWxlc2ZvcmNlMy5zaWx2
ZXJuLm5ldIIXc2FsZXNmb3JjZTQuc2lsdmVybi5uZXSCF3NhbGVzZm9yY2U1LnNp
bHZlcm4ubmV0ghdzYWxlc2ZvcmNlNi5zaWx2ZXJuLm5ldIIXc2FsZXNmb3JjZTcu
c2lsdmVybi5uZXSCF3NhbGVzZm9yY2U4LnNpbHZlcm4ubmV0ghNzYW5pbmV0LnNh
bmlmYWlyLmRlggtzZi5hY21wLm5ldIIVc2l0ZS50ZWNoY2VlZC1vcHMuY29tghJz
dXBwb3J0LmF2ZXJuYS5jb22CEnN1cHBvcnQuZWJpcy5uZS5qcIIUc3VwcG9ydC5l
c2NvcnRpYS5uZXSCG3N1cHBvcnRlci5lYS5ncmVlbnBlYWNlLm9yZ4ISc3VydmV5
LmRlbGlnaHQuZml0ghZ1cGRhdGVzLnRlYW1tZWQuY29tLmF1ghZ3d3cuYW1hem9u
LWdjYXRlY2guY29tghR3d3cuaXdhc2VkYXRhYmFzZS5qcIIVd3d3Lmstc3ByaW5n
Ym9hcmQuY29tghR3d3cud2VsbG5lc3Nmb29kcy5qcIISd3d3My5pbmxpdGUuY29t
LmF1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF4
N0pBJgAABAMARzBFAiAx0PSyudkjNMTqRr83f9ZV+mBrACD8aBmKlmOk5lHcyAIh
ANrXxkLQ+ZEsFAnFUsUQK2/tuz8AucyjuMZPKhrt64CBAHYA9lyUL9F3MCIUVBgI
MJRWjuNNExkzv98MLyALzE7xZOMAAAF4N0pBTAAABAMARzBFAiEA3x5S6EueGjBb
kf2bFSdkDz/ZDmNhs6FNHjarLxhWFywCIBcpaVka8iSjLytUh8uYpYVWdSFPebuf
V0CuChpyCXfcMA0GCSqGSIb3DQEBCwUAA4IBAQBZUXyvyqSJ4niQPBzwIOMNNPVU
egxATYx1D6nUWVvZxVTDQNdO0+OdSk9rcqBhcIR2naHIbWCfRwoVp7OkbVVhPg/g
gtdUXQ9TPNgH7d1Okgus0UmQXDVTun2U+mmj5xlIy9XuUOXTVxSHCRYiSbbtgYBc
ypzDWby4s+Wd4XcNxavnZbsFjnYi0iuzrHcwbMMsEWFlMMvLlwBJFPvAO8pDOtj0
tzRZtDx2nnwLTjzn2qC13bbqAmn+cQddejYvslwmEtmEoYFI3oosDmW+bmVTQB2t
U/dnAzs8hR1QRmPlqcKtoRN5WlIVqKn4hXJ2DWYb2WPe1bYkd/zWR+A860Bo
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/jvoT4T9nO3ZolVbGUod
69/QohYwxGSoZUYgc9csZpswrR8RXD58pPx4G17zWo3ChqRXiwY7FCLaL0Z8sAIN
EcgDaOB+epJGA8VfY2txSfCCMs9lGptOSLAE+85CLtrd6/MzQXH2Qbso7Lz0f8Lz
qWg+7/qyuSFg2fkHsL4pWbrhwP9mAPCDi0tUVAQ5k15KMFb9s/ozbNxMue6F5Wyf
9MLknjfVG/ePkhIips/2YeLBu6Ajm8UhlljBoc4sj/th0z6cWzolHqKnM03YOeu4
dLrUztIYsBUOLRBOPDkJz8HL8koOhYt64YzUXoZfZsxadZCuX6vXEFkkeL6WX1wy
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277521841819692945101297695530471289944140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-15 18:08:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-13 18:08:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32094070932592937986904554211365921107593803085796409995813336261940539500050132397110804179865113711083499968257357720924515254816656654765360499075382971638578524043064366786057009381454293879920702024422954951764032558486552400907245733055762955262145253883907252761674845048219599440172962625325935771344937122996539835472554976276704331973934634853533302548768976554069252869477689495659952871158803875134983974317002771276682257703441809591503989716649791108996179819487693887080496806396140324387824184232359992080200892360814096333608314271760511662537300511644115846817546579090451489267213538441766882783999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ee57b21d7b3ae9a10a69b50943a280ec3292869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admincamp.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admisiones.estudiaronline.ucam.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admisiones.online.uco.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.prachq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.praxsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.intelenyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap13.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu35.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu38.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na125.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na97.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.evolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.globalopticsdemo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.iba-dosimetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lhdbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.circles-concierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.good-sellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.murata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ent.circles-concierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.isid.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.goodsalespromotion.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forcehour.imbar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsclub.gardenstory.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nfnl2.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.zyfexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.trackunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.ku.ac.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.uj.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hue.savemepc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.anotherdomainsp.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.paycaptain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irm.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundentest.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.tia.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.vinsoftware.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.internet.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotemail.genomind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.upes.ac.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vevromerike.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.canva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-em.mylearningonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce-cms.aquilliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.displaywise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce2.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce3.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce4.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce5.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce6.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce7.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce8.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saninet.sanifair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.acmp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techceed-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.averna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.ea.greenpeace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.teammed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon-gcatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwasedatabase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfoods.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.inlite.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178374a41260000040300473045022031d0f4b2b9d92334c4ea46bf377fd655fa606b0020fc68198a9663a4e651dcc8022100dad7c642d0f9912c1409c552c5102b6fedbb3f00b9cca3b8c64f2a1aedeb8081007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178374a414c0000040300473045022100df1e52e84b9e1a305b91fd9b1527640f3fd90e6361b3a14d1e36ab2f1856172c0220172969591af224a32f2b5487cb98a5855675214f79bb9f5740ae0a1a720977dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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