prod.29.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:78:59:c4:e9:0e:1f:95:41:ae:b3:38:f4:19:d9:a7:77:24 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.29.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:78:59:c4:e9:0e:1f:95:41:ae:b3:38:f4:19:d9:a7:77:24
Serial Number (int): 389402351466283138942471144686160724850468
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:16:27:df:66:3c:66:1b:f7:32:dd:fd:59:82:a3:24:4e:71:12:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:e1:db:b9:b7:af:9e:ca:9d:1e:8d:b7:58:c8:d7:a4:54:66:b3:57
Fingerprint (sha256): 1b:1f:9e:a1:e6:88:ed:b7:8b:87:a1:ff:6a:d0:05:9f:3c:b8:c6:c9:92:e1:96:1c:e3:d1:3a:65:ad:b0:22:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.29.slot.cdn.salesforce-communities.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.29.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

birdseyecoupon.readyseteat.com
cdn.eu28.blitztesting.com
cdn.eu43.blitztesting.com
cdn.na131.blitztesting.com
cdn.na65.blitztesting.com
cdn.um3.blitztesting.com
cms.acrotec.ch
coder.episource.com
coding.episource.com
community.qaa.ac.uk
contactus.conagrabrands.com
content.cheshireimpact.com
customercontactus.conagrabrands.com
customerportal.interlacehealth.com
distribution.st.com
duncanhines.conagrabrands.com
email.subrat.in
faq.bmw.ch
faq.bmw.co.za
faq.bmw.es
faq.bmw.pt
faq.mini.ch
faq.mini.co.za
faq.mini.es
faq.mini.nl
faq.mini.pt
gardeinchickn.readyseteat.com
greenwire.greenpeace.org.uk
healthychoicecoupon.readyseteat.com
helpcenter.conagrabrands.com
mariecallenders.conagrabrands.com
mk.kz.marykayintouch.com
mk.marykayintouch.ua
my.diehardassurance.com
my.geoslam.com
p.trustpayments.com
pardot.darren-evans.co.uk
pardot.rithom.com
partners.adyen.com
partners.n2media.com
prod.29.slot.cdn.salesforce-communities.com
restaurant.foodpanda.co.jp
restaurant.foodpanda.co.th
restaurant.foodpanda.com.bd
restaurant.foodpanda.com.kh
restaurant.foodpanda.com.mm
restaurant.foodpanda.hk
restaurant.foodpanda.la
restaurant.foodpanda.my
restaurant.foodpanda.ph
restaurant.foodpanda.pk
restaurant.foodpanda.sg
rlesa.repsol.com
salesforcecms.adstream.com
sfc.terry.uga.edu
sponsor.continuvue.com
suite.cm.tourlane.com
support.exact.com
support.lavu.com
support.n2media.com
support.zspace.com
uploads.episource.com
us.support.gohenry.com
www.diehardassurance.com
www.mycqstore.com
www.myindstore.com
www.restaurant.foodpanda.co.jp
www.restaurant.foodpanda.co.th
www.restaurant.foodpanda.com.bd
www.restaurant.foodpanda.com.kh
www.restaurant.foodpanda.com.mm
www.restaurant.foodpanda.hk
www.restaurant.foodpanda.la
www.restaurant.foodpanda.my
www.restaurant.foodpanda.ph
www.restaurant.foodpanda.pk
www.restaurant.foodpanda.sg

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.29.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFlx476hk9t2Ut/9Nifp
Svtd7A1x1Sog8b40CtS25kZ8Z+g61ANl9ikIbFx24MkE3PP9l77h2pVYGg/OZrSi
sAsGrdHSe8StsrkXpc2v/fLVGJqBrOwNVhZWfpUeDpESj1Pxjhe0lK/CGkoICumS
XqOzqksW7rkntsOrYHDN5yIHvoA1hvHrMtvcpcnanepGQMk6aTylEev6zIyGsKVg
A25vQSCRG4TmHt9f0/uHa0ag9cfumioXZ/+3yiPFLuLmvmZLSfDt9bWybyBwwHmu
s7nqEWZFuQMxmCwHCUpaktsRRua2zB6ntu+n0jM/KYq7iTenil0hDPYNwksrVO8c
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389402351466283138942471144686160724850468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 19:34:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-20 19:34:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22767001808775224480944976886819561937717317818373697064154779905697617166062464552053207509088409569947519853936325149767185376484362067892767000817065436763649744972240683156294511225388600838206462081571513283392068691567767298192156944673906732060119202234435806592123378944055916195944959227291169648138207929597773288356676397051059292196578078842183246783013656098561380627203512982434541010909680669634065446542291079116986350936623410126650055763199731196010772079943045954646243113355433113565331408842362503813209942029053304728520452340528419080404872997006656412366748240077030810764980947606753256610873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							011627df663c661bf732ddfd5982a3244e71121c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdseyecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu43.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na131.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na65.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acrotec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coder.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qaa.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cheshireimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercontactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.interlacehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanhines.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.subrat.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeinchickn.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwire.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthychoicecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariecallenders.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.kz.marykayintouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.geoslam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.trustpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.darren-evans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.rithom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.adyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesa.repsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.adstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.terry.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.continuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.cm.tourlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lavu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.support.gohenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycqstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017c0a113afe0000040300473045022049305e8bef2448f854766a927288c340a728b97bd393c69e138c3cc76fad2a2f0221008a18afd1fc39aae4b60e4f0ab33e21f3a60cfc8ab2e4ea44f2d2dea5d38dd7430076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017c0a113b2f0000040300473045022030e44b8289264ec1e53fe092d9ea7297bf99e477bc142d749b6bc1162ba4bc49022100a9a4983e68c8e4fbde8a8bc063f5170565afdacabc419f354c7f50f3d7fb095d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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