prod.18.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:26:20:fd:5c:86:a7:98:33:92:a8:4d:a1:99:bc:cd:7a:82 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.18.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:20:fd:5c:86:a7:98:33:92:a8:4d:a1:99:bc:cd:7a:82
Serial Number (int): 361423724493657100127202662212998454409858
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:e8:8e:1d:9c:3b:61:96:cc:74:6e:fe:70:51:25:db:66:fa:03:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:30:6e:16:a0:5b:15:17:7a:f9:34:9d:62:34:9c:9d:40:ef:71:e3
Fingerprint (sha256): 17:66:28:b1:82:30:88:0d:07:7e:61:47:43:0e:44:68:a7:cf:11:d5:09:ef:a6:8c:30:51:cd:2b:be:8e:16:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.18.slot.cdn.salesforce-communities.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.18.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.councilforinclusion.com
assets.vrmco.com
assets.vrmia.com
at.mexinsurance.com
betatest.movetia.ch
buy.casewareafrica.com
care.andjaro.com
carlo.private.lifen.fr
cdn.eu30.blitztesting.com
cdn.eu31.blitztesting.com
cdn.lymph-co.com
cdn.na114.blitztesting.com
cdn.na69.blitztesting.com
cdn.na89.blitztesting.com
client.lifen.fr
cmsannenberg.usc.edu
community.hivehome.com
delegazione.acifondi.it
exam.economicsolympiad.org
gestion.certisure.com
hub.midmrkt.com
knowledge.dpo.fr
market.imdadi.com
monespace.kley.fr
mymobilities.movetia.ch
offertes.energieinhuis.nl
offertes.suniverse.nl
one.planmeca.com
ortho.evenly.com
pardot.liveu.tv
partners.digital.ai
partners.mightyhive.com
patients.evenly.com
portal.ashlar.financial
portal.hopeandhomes.ro
portal.sieplo.com
pro-alliance.logitechg.com
prod.18.slot.cdn.salesforce-communities.com
registration.economicsolympiad.org
salesforce.focuspointsolutions.com
sf.energieinhuis.nl
sfdc-c4e.ab-inbev.com
shop.casewareafrica.com
siteforce.zlinekitchen.com
support.certisure.com
support.chamberlaingroup.com
support.corporate.ef.com
support.datasure.net
support.dias.nl
support.einride.tech
support.ionodes.com
support.itbrm.com
support.statflo.com
support.synergemtech.com
test.economicsolympiad.org
thehive.mightyhive.com
virtual.midmrkt.com
www.acifondi.it
www.buyitlocal.shop
www.compass-rent.com
www.compass-rent.it
www.compassrent.info
www.compassrent.it
www.fdemportal.com
www.floridacare4covidsm.com
www.hornbachprofi.nl
www.kaufregional.com
www.maascleanup.nl
www.myabiportal.com
www.nbusinessclub.com
www.partners.abb.com
www.portal.hopeandhomes.ro
www.profiservice.nl
www.safer-fl.com
www2.onia.pl
www4.customervalue-consulting.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.18.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMGjCCCwKgAwIBAgISBCYg/VyGp5gzkqhNoZm8zXqCMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAxMjgxMzIxMjhaFw0yMTA0MjgxMzIxMjhaMDYxNDAyBgNVBAMT
K3Byb2QuMTguc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNF26VSpaGdVhHxa2TwZY5HZY
D5g+ib3zZsnj/fhj/PEWKCj5KyMsQ2HMJcIx3MfnDoScHolaFT4ViCceZrEn4W40
mfz4KFVEBD4545z6pPE2uOuzXqASPE/aX/qlfKa4PG9t/WKf7hWrmNpT+8tiw1Ee
Vwu4b1P8Bi6/oyYanm3ODiG5sAJq4GH8OFFSc/A6qjDVps5LP4UsbY8kA3m+C68I
2GyYjJQ4NFmf1DyQFGVTW8oehjpnEgqIL3GDNBTX39+V7+UAsHFfa8EzACxFEsJj
W5LmbP153TZ5AJexBb8KD/QUaXuI1qRICtZ0XB3FHsHB8Oz3WOvFSBPArv6pAgMB
AAGjggkkMIIJIDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCXojh2cO2GWzHRu/nBR
Jdtm+gNKMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIG8gYDVR0RBIIG6TCCBuWC
HmFzc2V0cy5jb3VuY2lsZm9yaW5jbHVzaW9uLmNvbYIQYXNzZXRzLnZybWNvLmNv
bYIQYXNzZXRzLnZybWlhLmNvbYITYXQubWV4aW5zdXJhbmNlLmNvbYITYmV0YXRl
c3QubW92ZXRpYS5jaIIWYnV5LmNhc2V3YXJlYWZyaWNhLmNvbYIQY2FyZS5hbmRq
YXJvLmNvbYIWY2FybG8ucHJpdmF0ZS5saWZlbi5mcoIZY2RuLmV1MzAuYmxpdHp0
ZXN0aW5nLmNvbYIZY2RuLmV1MzEuYmxpdHp0ZXN0aW5nLmNvbYIQY2RuLmx5bXBo
LWNvLmNvbYIaY2RuLm5hMTE0LmJsaXR6dGVzdGluZy5jb22CGWNkbi5uYTY5LmJs
aXR6dGVzdGluZy5jb22CGWNkbi5uYTg5LmJsaXR6dGVzdGluZy5jb22CD2NsaWVu
dC5saWZlbi5mcoIUY21zYW5uZW5iZXJnLnVzYy5lZHWCFmNvbW11bml0eS5oaXZl
aG9tZS5jb22CF2RlbGVnYXppb25lLmFjaWZvbmRpLml0ghpleGFtLmVjb25vbWlj
c29seW1waWFkLm9yZ4IVZ2VzdGlvbi5jZXJ0aXN1cmUuY29tgg9odWIubWlkbXJr
dC5jb22CEGtub3dsZWRnZS5kcG8uZnKCEW1hcmtldC5pbWRhZGkuY29tghFtb25l
c3BhY2Uua2xleS5mcoIXbXltb2JpbGl0aWVzLm1vdmV0aWEuY2iCGW9mZmVydGVz
LmVuZXJnaWVpbmh1aXMubmyCFW9mZmVydGVzLnN1bml2ZXJzZS5ubIIQb25lLnBs
YW5tZWNhLmNvbYIQb3J0aG8uZXZlbmx5LmNvbYIPcGFyZG90LmxpdmV1LnR2ghNw
YXJ0bmVycy5kaWdpdGFsLmFpghdwYXJ0bmVycy5taWdodHloaXZlLmNvbYITcGF0
aWVudHMuZXZlbmx5LmNvbYIXcG9ydGFsLmFzaGxhci5maW5hbmNpYWyCFnBvcnRh
bC5ob3BlYW5kaG9tZXMucm+CEXBvcnRhbC5zaWVwbG8uY29tghpwcm8tYWxsaWFu
Y2UubG9naXRlY2hnLmNvbYIrcHJvZC4xOC5zbG90LmNkbi5zYWxlc2ZvcmNlLWNv
bW11bml0aWVzLmNvbYIicmVnaXN0cmF0aW9uLmVjb25vbWljc29seW1waWFkLm9y
Z4Iic2FsZXNmb3JjZS5mb2N1c3BvaW50c29sdXRpb25zLmNvbYITc2YuZW5lcmdp
ZWluaHVpcy5ubIIVc2ZkYy1jNGUuYWItaW5iZXYuY29tghdzaG9wLmNhc2V3YXJl
YWZyaWNhLmNvbYIac2l0ZWZvcmNlLnpsaW5la2l0Y2hlbi5jb22CFXN1cHBvcnQu
Y2VydGlzdXJlLmNvbYIcc3VwcG9ydC5jaGFtYmVybGFpbmdyb3VwLmNvbYIYc3Vw
cG9ydC5jb3Jwb3JhdGUuZWYuY29tghRzdXBwb3J0LmRhdGFzdXJlLm5ldIIPc3Vw
cG9ydC5kaWFzLm5sghRzdXBwb3J0LmVpbnJpZGUudGVjaIITc3VwcG9ydC5pb25v
ZGVzLmNvbYIRc3VwcG9ydC5pdGJybS5jb22CE3N1cHBvcnQuc3RhdGZsby5jb22C
GHN1cHBvcnQuc3luZXJnZW10ZWNoLmNvbYIadGVzdC5lY29ub21pY3NvbHltcGlh
ZC5vcmeCFnRoZWhpdmUubWlnaHR5aGl2ZS5jb22CE3ZpcnR1YWwubWlkbXJrdC5j
b22CD3d3dy5hY2lmb25kaS5pdIITd3d3LmJ1eWl0bG9jYWwuc2hvcIIUd3d3LmNv
bXBhc3MtcmVudC5jb22CE3d3dy5jb21wYXNzLXJlbnQuaXSCFHd3dy5jb21wYXNz
cmVudC5pbmZvghJ3d3cuY29tcGFzc3JlbnQuaXSCEnd3dy5mZGVtcG9ydGFsLmNv
bYIbd3d3LmZsb3JpZGFjYXJlNGNvdmlkc20uY29tghR3d3cuaG9ybmJhY2hwcm9m
aS5ubIIUd3d3LmthdWZyZWdpb25hbC5jb22CEnd3dy5tYWFzY2xlYW51cC5ubIIT
d3d3Lm15YWJpcG9ydGFsLmNvbYIVd3d3Lm5idXNpbmVzc2NsdWIuY29tghR3d3cu
cGFydG5lcnMuYWJiLmNvbYIad3d3LnBvcnRhbC5ob3BlYW5kaG9tZXMucm+CE3d3
dy5wcm9maXNlcnZpY2UubmyCEHd3dy5zYWZlci1mbC5jb22CDHd3dzIub25pYS5w
bIIhd3d3NC5jdXN0b21lcnZhbHVlLWNvbnN1bHRpbmcuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAXNxD
kv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF3SV7aQgAABAMASDBGAiEA
uoqdDttigB43OipAIAh22NZJw7BqQLFXr6uZDB3vwdICIQC9wqSU/RQaGdC1QZpA
7qc/+VdYhDdKnMMTpIjqDwLLbQB1AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqX
aJl+IvDXAAABd0le2mUAAAQDAEYwRAIgf57kzKgxVUkIEZTMepL7oi5m/puQcN5X
n7UUPQUmXY0CIA5pfpcN5QtQyNLuUCdcX+8+tNN20WYEUlQl/kviA4wdMA0GCSqG
SIb3DQEBCwUAA4IBAQA0fChOwixQAhDd9t9fQ5veLLCiQAf9NFT72MgjGHMciNmF
/88qIk+DedMD5UNvmRu1gvK1TgirycFSt4dL4+iIWuaP6vmYvAQt4Ui4aiJwndFY
hS/ZHaQkdZTTI7ta1eBZPYEr1m0CGw0kePh2lshhgAMiE4iDnkDXOSGW4yeut9Ln
qrWtWXSwdLibJKcpLA4QzjmUU8Ikid1ihWQY4YZQgCnVbto4z34JBAjRSwi1Grkm
r7AyF3miqC4/lxZuepLkFCVpa0m9n8A/qqAO7jVdj6XvRfWdRCi/zcsgwSOHm8KW
p10TBCWnmdwTv8ZyjLtsNm8x/0Pf+Jp/q4YdBVvi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TRdulUqWhnVYR8Wtk8G
WOR2WA+YPom982bJ4/34Y/zxFigo+SsjLENhzCXCMdzH5w6EnB6JWhU+FYgnHmax
J+FuNJn8+ChVRAQ+OeOc+qTxNrjrs16gEjxP2l/6pXymuDxvbf1in+4Vq5jaU/vL
YsNRHlcLuG9T/AYuv6MmGp5tzg4hubACauBh/DhRUnPwOqow1abOSz+FLG2PJAN5
vguvCNhsmIyUODRZn9Q8kBRlU1vKHoY6ZxIKiC9xgzQU19/fle/lALBxX2vBMwAs
RRLCY1uS5mz9ed02eQCXsQW/Cg/0FGl7iNakSArWdFwdxR7BwfDs91jrxUgTwK7+
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361423724493657100127202662212998454409858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-28 13:21:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-28 13:21:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.18.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26914581656167365389096505123923912134507943016495019196708149192557146248223069122967182610552280182570138053840336111011431826766489199809133693761266682731211683518098473943745297861442025688913340432842254734006865346829538348963759181014688643060561367377414752110687443714831071352245510806444418738331169301540145443739649734714293710439810562897145219547703748388006981943166202908754238538497451265737811464555162971457656355528092434330580273438543969788408051820689861574363241483772621619354846841345285707790546518511261404626760984640893105085386256600513925297891951378677550551724407276009698693676713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25e88e1d9c3b6196cc746efe705125db66fa034a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1769 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.councilforinclusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vrmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vrmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.mexinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betatest.movetia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.casewareafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.andjaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlo.private.lifen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu30.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu31.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.lymph-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na114.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na69.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na89.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.lifen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsannenberg.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.hivehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegazione.acifondi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.economicsolympiad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestion.certisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.midmrkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.dpo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.imdadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespace.kley.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymobilities.movetia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offertes.energieinhuis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offertes.suniverse.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.planmeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortho.evenly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.liveu.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.digital.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.mightyhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patients.evenly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ashlar.financial'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.hopeandhomes.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.sieplo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-alliance.logitechg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.18.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.economicsolympiad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.focuspointsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.energieinhuis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfdc-c4e.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.casewareafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteforce.zlinekitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.certisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.chamberlaingroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.corporate.ef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.datasure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dias.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.einride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ionodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.itbrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.statflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.synergemtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.economicsolympiad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehive.mightyhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual.midmrkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acifondi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyitlocal.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compass-rent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compass-rent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compassrent.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compassrent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdemportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridacare4covidsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornbachprofi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maascleanup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myabiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbusinessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partners.abb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portal.hopeandhomes.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profiservice.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safer-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.onia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.customervalue-consulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000177495eda420000040300483046022100ba8a9d0edb62801e373a2a40200876d8d649c3b06a40b157afab990c1defc1d2022100bdc2a494fd141a19d0b5419a40eea73ff9575884374a9cc313a488ea0f02cb6d0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177495eda65000004030046304402207f9ee4cca8315549081194cc7a92fba22e66fe9b9070de579fb5143d05265d8d02200e697e970de50b50c8d2ee50275c5fef3eb4d376d16604525425fe4be2038c1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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