prod.12.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:24:60:3b:8c:7f:ef:bf:a4:40:1c:aa:76:dc:4d:ab:61:e8 was issued on by Let's Encrypt.

With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.12.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:60:3b:8c:7f:ef:bf:a4:40:1c:aa:76:dc:4d:ab:61:e8
Serial Number (int): 360827224018978296498180971152744391598568
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:87:93:6f:1a:38:08:f7:fa:a2:d3:7b:38:64:80:09:4f:4c:70:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:b8:8b:ba:73:26:94:c7:d0:4f:19:f4:e1:10:9b:27:99:42:14:43
Fingerprint (sha256): 1a:16:22:b8:55:5a:b9:83:e4:5a:57:98:0e:ad:83:28:c4:35:32:1b:ca:e7:8c:bd:4e:db:e4:7d:01:b2:8f:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.12.slot.cdn.salesforce-communities.com

70

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.12.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.inquirer.com
agency.nycers.org
articles.coronafacts.com
aws.nmb.gov
cdn.ap20.blitztesting.com
cdn.na21.blitztesting.com
cdn.na85.blitztesting.com
clients.lexmedicus.com.au
cms.classvipartners.com
cms.forensicanalytical.com
cms.ufm.edu
community.greencamps.org
compliance.liqid.de
consumidorfaq.eudora.com.br
contacts.bayareametro.gov
content.nbcuni.com
courtyard.law.ou.edu
email.truelearn.com
experts.lexmedicus.com.au
hello.addigy.com
help.stellainsurance.com.au
help.workgrid.com
helpdesk.edsurge.com
info.microbiologics.com
info.theretirementsolution.com
it.qqcw.us
itsc-demo-config.tanium.com
m.perkville.com
medical.nycers.org
members.cyber.nj.gov
my.airforce.com
my.ymcade.org
mynycers.nycers.org
njshield.njohsp.gov
ops.patientportalky.com
p.cbhhomes.com
pardot-uk.eu.vipre.com
pardot.lexmedicus.com.au
pardot.soljit.com
pardot.tdwilliamson.com
pardotcms.dbu.edu
partners.cyber.gov.au
partners.cyber.nj.gov
partners.panduit.com
partners.streamsets.com
pfhsfcms.jacksbasket.org
portal.coolgardie.wa.gov.au
preferredplayer.fila.com
prime.chrisstewart.com.au
prod.12.slot.cdn.salesforce-communities.com
retailer.charlottesweb.com
sales.optios.com
salesforce.jae.com
salesforce.koresoftware.com
salesforce.optios.com
sigma.sforcedemo.com
support.apricot.info
support.salsify.com
support.socialsolutions.com
support.stedwards.edu
tdwaccess.tdwilliamson.com
testsupport.stedwards.edu
www.agriskportal.com
www.clipperstartcard.com
www.cochezycia.com
www.communitytrustcafe.com
www.csiselementary.org
www.icpmasterworkscommunity.com
www.lymi.fund
www.lymi.org

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.12.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILmjCCCoKgAwIBAgISBCRgO4x/77+kQByqdtxNq2HoMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA4MTEyMDM5NDlaFw0yMjExMDkyMDM5NDhaMDYxNDAyBgNVBAMT
K3Byb2QuMTIuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0rOQ2fwB3kByugv6mzogPEg0
d2qKhuWm8KkEfG9EL6iZhHXkDk4AUKT57uXI5RshJzQbpAHrxnZISbrycWZmzLai
LGB3dBVtBgDrUfiY+tx8O6oOCy/juxcIBcy0kTc1tookKhKtfqmP7xBYcO1jkDSd
6TmZrCDaBjjnbEjVMbanR/8IMoK4hgdIBjpyMAeM0gmO+BZSLEuDMKg+KkKtVNDz
EmVdcTFriD5Th5aiuLzoVZFt1/RFcgr63hOIdlwKA+wkOspkHhLCOcgQADPNiEOy
7J5AmMBpNmxMRXCQ15WzKLgMINSNaVUT5nh6weMoWx4UXZ8Q5WBtAkV3Xk5NAgMB
AAGjggikMIIIoDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+Hk28aOAj3+qLTezhk
gAlPTHDKMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGcwYDVR0RBIIGajCCBmaC
FGFjY291bnQuaW5xdWlyZXIuY29tghFhZ2VuY3kubnljZXJzLm9yZ4IYYXJ0aWNs
ZXMuY29yb25hZmFjdHMuY29tggthd3Mubm1iLmdvdoIZY2RuLmFwMjAuYmxpdHp0
ZXN0aW5nLmNvbYIZY2RuLm5hMjEuYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLm5hODUu
YmxpdHp0ZXN0aW5nLmNvbYIZY2xpZW50cy5sZXhtZWRpY3VzLmNvbS5hdYIXY21z
LmNsYXNzdmlwYXJ0bmVycy5jb22CGmNtcy5mb3JlbnNpY2FuYWx5dGljYWwuY29t
ggtjbXMudWZtLmVkdYIYY29tbXVuaXR5LmdyZWVuY2FtcHMub3JnghNjb21wbGlh
bmNlLmxpcWlkLmRlghtjb25zdW1pZG9yZmFxLmV1ZG9yYS5jb20uYnKCGWNvbnRh
Y3RzLmJheWFyZWFtZXRyby5nb3aCEmNvbnRlbnQubmJjdW5pLmNvbYIUY291cnR5
YXJkLmxhdy5vdS5lZHWCE2VtYWlsLnRydWVsZWFybi5jb22CGWV4cGVydHMubGV4
bWVkaWN1cy5jb20uYXWCEGhlbGxvLmFkZGlneS5jb22CG2hlbHAuc3RlbGxhaW5z
dXJhbmNlLmNvbS5hdYIRaGVscC53b3JrZ3JpZC5jb22CFGhlbHBkZXNrLmVkc3Vy
Z2UuY29tghdpbmZvLm1pY3JvYmlvbG9naWNzLmNvbYIeaW5mby50aGVyZXRpcmVt
ZW50c29sdXRpb24uY29tggppdC5xcWN3LnVzghtpdHNjLWRlbW8tY29uZmlnLnRh
bml1bS5jb22CD20ucGVya3ZpbGxlLmNvbYISbWVkaWNhbC5ueWNlcnMub3JnghRt
ZW1iZXJzLmN5YmVyLm5qLmdvdoIPbXkuYWlyZm9yY2UuY29tgg1teS55bWNhZGUu
b3JnghNteW55Y2Vycy5ueWNlcnMub3JnghNuanNoaWVsZC5uam9oc3AuZ292ghdv
cHMucGF0aWVudHBvcnRhbGt5LmNvbYIOcC5jYmhob21lcy5jb22CFnBhcmRvdC11
ay5ldS52aXByZS5jb22CGHBhcmRvdC5sZXhtZWRpY3VzLmNvbS5hdYIRcGFyZG90
LnNvbGppdC5jb22CF3BhcmRvdC50ZHdpbGxpYW1zb24uY29tghFwYXJkb3RjbXMu
ZGJ1LmVkdYIVcGFydG5lcnMuY3liZXIuZ292LmF1ghVwYXJ0bmVycy5jeWJlci5u
ai5nb3aCFHBhcnRuZXJzLnBhbmR1aXQuY29tghdwYXJ0bmVycy5zdHJlYW1zZXRz
LmNvbYIYcGZoc2ZjbXMuamFja3NiYXNrZXQub3Jnghtwb3J0YWwuY29vbGdhcmRp
ZS53YS5nb3YuYXWCGHByZWZlcnJlZHBsYXllci5maWxhLmNvbYIZcHJpbWUuY2hy
aXNzdGV3YXJ0LmNvbS5hdYIrcHJvZC4xMi5zbG90LmNkbi5zYWxlc2ZvcmNlLWNv
bW11bml0aWVzLmNvbYIacmV0YWlsZXIuY2hhcmxvdHRlc3dlYi5jb22CEHNhbGVz
Lm9wdGlvcy5jb22CEnNhbGVzZm9yY2UuamFlLmNvbYIbc2FsZXNmb3JjZS5rb3Jl
c29mdHdhcmUuY29tghVzYWxlc2ZvcmNlLm9wdGlvcy5jb22CFHNpZ21hLnNmb3Jj
ZWRlbW8uY29tghRzdXBwb3J0LmFwcmljb3QuaW5mb4ITc3VwcG9ydC5zYWxzaWZ5
LmNvbYIbc3VwcG9ydC5zb2NpYWxzb2x1dGlvbnMuY29tghVzdXBwb3J0LnN0ZWR3
YXJkcy5lZHWCGnRkd2FjY2Vzcy50ZHdpbGxpYW1zb24uY29tghl0ZXN0c3VwcG9y
dC5zdGVkd2FyZHMuZWR1ghR3d3cuYWdyaXNrcG9ydGFsLmNvbYIYd3d3LmNsaXBw
ZXJzdGFydGNhcmQuY29tghJ3d3cuY29jaGV6eWNpYS5jb22CGnd3dy5jb21tdW5p
dHl0cnVzdGNhZmUuY29tghZ3d3cuY3Npc2VsZW1lbnRhcnkub3Jngh93d3cuaWNw
bWFzdGVyd29ya3Njb21tdW5pdHkuY29tgg13d3cubHltaS5mdW5kggx3d3cubHlt
aS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdQDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAA
AYKO2WrlAAAEAwBGMEQCIFnxKdVLl+KGv/8sInzqu8+ToObbfi9dzP23d7fpiLgK
AiA+gqFDytu6bZuybCDHIbUoiwPgCO9cJICea8Vg5ZVSVQB2AEalVet1+pEgMLWi
iWn0830RLEF0vv1JuIWr8vxw/m1HAAABgo7ZaxYAAAQDAEcwRQIhAObpC5ETZ1cY
poW28SFvp7TKElZJ6jp7k/aIhLKa1r8uAiAmk4HnoQAtv+mpPgJR7e5RqQcKDK9c
YRFSKooFK11dojANBgkqhkiG9w0BAQsFAAOCAQEAHN6AWDCQHT4dOUJf4cZe3Ebh
yYHRM62rrLf/UfceoNyRDODQz2fZpzI2zS5BWXaH0MxlaaIjIgJw8o9HBU5p6qcM
oCnSGx2yi5NMQWU0R8Obi1GDcIIpQBukogyOA0BCnFvdt0yswZ572w6JQb6KlVCL
JOGzngL31lC5GhywQuquka/Ptvwuvg87XhICsjPAJcQahpS9nt9NIQViDxqdV3qm
wgzVRx9Y2RXl9NXTF4UWb23BCPNV4hj2IdBo70ZcLe6CVwiqSKCHHCxE92kdhF+4
kad8YLfiuomJZNVoDXk4hQmYxW0Ip2AZ+3IJKnm1qYQa9BtnLceujyTJDs1xlQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tKzkNn8Ad5AcroL+ps6
IDxINHdqioblpvCpBHxvRC+omYR15A5OAFCk+e7lyOUbISc0G6QB68Z2SEm68nFm
Zsy2oixgd3QVbQYA61H4mPrcfDuqDgsv47sXCAXMtJE3NbaKJCoSrX6pj+8QWHDt
Y5A0nek5mawg2gY452xI1TG2p0f/CDKCuIYHSAY6cjAHjNIJjvgWUixLgzCoPipC
rVTQ8xJlXXExa4g+U4eWori86FWRbdf0RXIK+t4TiHZcCgPsJDrKZB4SwjnIEAAz
zYhDsuyeQJjAaTZsTEVwkNeVsyi4DCDUjWlVE+Z4esHjKFseFF2fEOVgbQJFd15O
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360827224018978296498180971152744391598568
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 20:39:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 20:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27118898009814515383507975300618088843004338854336333939272588839917765847221527853283810248512496042591276303911601383353394598816689935464964155096438547983738966410312128658503471651053073236429390508918247553317273024447580526732425195417440566672173843517314240531352670043178393205666890336897279584052498148194019652693633505350691198939356160509383601241906984238051744684147620355203579312719163846750066000228219782723659773738134950297628299193845333054837499809418380872481902368674121013837250259110824694696012370108481663911697807818082896500251810900530032689544866679835663076867370388284281471258189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f87936f1a3808f7faa2d37b386480094f4c70ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.inquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.coronafacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.nmb.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap20.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na85.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.classvipartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.forensicanalytical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ufm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.greencamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.liqid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumidorfaq.eudora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.bayareametro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtyard.law.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.truelearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.addigy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stellainsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.microbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.theretirementsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.qqcw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsc-demo-config.tanium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.perkville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ymcade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynycers.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njshield.njohsp.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.patientportalky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.cbhhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot-uk.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.soljit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotcms.dbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.panduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.streamsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfhsfcms.jacksbasket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.coolgardie.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferredplayer.fila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.chrisstewart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailer.charlottesweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.jae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.koresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.sforcedemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.apricot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.salsify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.socialsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdwaccess.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsupport.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriskportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clipperstartcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cochezycia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitytrustcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csiselementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icpmasterworkscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001828ed96ae50000040300463044022059f129d54b97e286bfff2c227ceabbcf93a0e6db7e2f5dccfdb777b7e988b80a02203e82a143cadbba6d9bb26c20c721b5288b03e008ef5c24809e6bc560e595525500760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001828ed96b160000040300473045022100e6e90b9113675718a685b6f1216fa7b4ca125649ea3a7b93f68884b29ad6bf2e0220269381e7a1002dbfe9a93e0251edee51a9070a0caf5c6111522a8a052b5d5da2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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