prod.4.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:f2:e6:65:aa:8b:a2:e2:af:36:9f:d7:12:f0:76:f5:9c was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.4.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:f2:e6:65:aa:8b:a2:e2:af:36:9f:d7:12:f0:76:f5:9c
Serial Number (int): 407981145036577064809798599212570458387868
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:1a:50:c5:77:d7:12:62:2d:41:40:4e:b5:c6:cd:b8:6c:54:b7:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:70:06:cb:4c:a1:b7:ee:7f:e0:e8:83:b0:3b:b3:23:e7:5d:ac:00
Fingerprint (sha256): 17:d2:76:bf:78:fc:b4:ff:8c:de:8f:31:54:41:ad:26:35:d3:0d:17:b3:41:de:80:48:c3:a5:2a:72:82:a1:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.4.slot.cdn.salesforce-communities.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.4.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agent.smscor.com
bizconnect.gimasys.com
cares.paymaya.com
cdn.ap5.blitztesting.com
cdn.um2.blitztesting.com
certification.innovid.com
cloudcare.outintheclouds.com
cms.alive-web.tech
cms.smscor.com
community.gofoundation.org.au
community.moncel.com
connect.jsa.org
content.tasland.org.au
customersupport.haivision.com
direct.fleetpride.com
donate.avi.org.au
edirectory.novaonline.com
eduinfo-lightning-di.casio-intl.com
eduinfo-lightning-eu.casio-intl.com
eform.novaonline.com
exchange.matillion.com
food.smscor.com
genpact.businesstalentgroup.com
help.adaptus.com
hub.sustainablebrands.com
internal.gradwell.com
just.living-future.org
members.ourwaparks.org.au
metlcommunity.matillion.com
mygfa.goodfridayappeal.com.au
na.sika-cms.com
nps.nikon.com.au
pardot.catercare.com.au
pardot.herrmannsolutions.asia
pardot.outintheclouds.com
partnerportal.nordicfinance.com
partnersupport.gradwell.com
parts.fleetpride.com
playground.oegen.co.uk
portal.foodsafety.com.au
premium.campmanyabogados.com
prod.4.slot.cdn.salesforce-communities.com
regulatorywatch.im.natixis.com
riaglass.marketcounsel.com
sales.smscor.com
salesforce.colinjamesmethod.com.au
salesforce.resmed.kr
sf.smscor.com
sf.teknofix.com.tr
support-stage2.haivision.com
support.haivision.com
support.marqlabs.com
support.mywave.cloud
support.plutora.com
support.savvas.com
support.singleplatform.com
support.stage.singleplatform.com
supportcenter.turnitin.com
supportcenterbeta.turnitin.com
supportcommunity.haivision.com
surveys.im.natixis.com
tcs365.paccar.com
test-community.foodsafety.com.au
timetracking.haivision.com
www.cms.resimaxgroup.com.au
www.hospitality.org.nz
www2.fleetpride.com
www3.cloudontapsc.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.4.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/4qqIEzQ2Mc76GjWZRH
kK0/uzG7p1rkU4Z38HyiEjTSjVxJBm6O6cRZGDSj7mUPSpxd3uDjXFSLP8FcOWod
z7E9VzrTeeuyvwp/9QbSBjJxQ+UJ/kFYz4DpTtLKFyeMBo5u8oYqcyqjSRuV02kT
Hte1Nds2TgTWq4yEkSqr6cH2INFisOnCgu91fkTboDtVv6cYKQtZWSZcrW+3+n/w
GX0Jfwd0D3qKibrdvMTuW6exIMxqSsYO+5sUDku58b5YQxLuhC3EN+De70kIWkO/
t9OwP4ZNI+dKsUOpVv/fYvlAYWt6dk+xQFslLR26pQ5NqtY8lpWdKu1AoIYUUUHC
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407981145036577064809798599212570458387868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:34:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 00:34:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.4.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24236850486854604718489870212165177695886178467783660162231552382205227444085993256296493990938175503021180250184906038461626351099559285409447038580335419038883826156578808093764521448196238252328024084796005003826357264744396128706292815393754955662197194673628875624544939487215058993564835759087157438177155588835936630886908285782069880308622458984500575063923581607773428631865919114562003503255456211851507575196391511460046159165872777128021787247361760850159882308413530815393996458912269191783397966248164044540580880288529767121048075735699463541787734390177387134842285430193165132452609378209284910858859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a61a50c577d712622d41404eb5c6cdb86c54b73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1744 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizconnect.gimasys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cares.paymaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap5.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um2.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certification.innovid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudcare.outintheclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.alive-web.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.gofoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.moncel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.jsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.tasland.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.fleetpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate.avi.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edirectory.novaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduinfo-lightning-di.casio-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduinfo-lightning-eu.casio-intl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eform.novaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.matillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'food.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genpact.businesstalentgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adaptus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.sustainablebrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.gradwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just.living-future.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.ourwaparks.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metlcommunity.matillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygfa.goodfridayappeal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.sika-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.nikon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.catercare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.herrmannsolutions.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.outintheclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.nordicfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnersupport.gradwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parts.fleetpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playground.oegen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.foodsafety.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium.campmanyabogados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.4.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regulatorywatch.im.natixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riaglass.marketcounsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.colinjamesmethod.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.resmed.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.smscor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.teknofix.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-stage2.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.marqlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mywave.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.plutora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.savvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.singleplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stage.singleplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.turnitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenterbeta.turnitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcommunity.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.im.natixis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcs365.paccar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-community.foodsafety.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetracking.haivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.resimaxgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hospitality.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.fleetpride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.cloudontapsc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b173917ba0000040300473045022100d6840c0ce12bb8a4d94ae9aca5d4ca3baf49bcf3b5ae23d17292a0dbfe0bb12f022037dea6f106cfe243c8b31fe1b8aac4a4df3cd6d1e28d1ec807970bcb4f9fd75b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b1739181c0000040300473045022100a247815c470b60b11a402dbc154d5e9d4cefe71fcce3ab2806773f7acd3a39da02201a474d90bcd4dc6db5f9feb6dbbe41fbe0b3d4ae5cccf62af2d603cd5055db17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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