prod.18.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a5:7d:60:27:d3:b0:52:ca:81:cc:b3:30:ef:ab:fa:3d:44 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.18.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:7d:60:27:d3:b0:52:ca:81:cc:b3:30:ef:ab:fa:3d:44
Serial Number (int): 404762387036753053168400819656610887122244
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:75:c0:c1:6f:98:bb:95:47:18:d9:f2:63:ae:c4:98:99:4d:84:2d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:71:06:26:a3:b6:58:dc:4c:32:4b:83:42:67:e4:24:72:65:b4:43
Fingerprint (sha256): 1f:0e:e1:c8:67:b6:8a:74:7d:54:1a:3b:12:62:47:3a:db:61:8a:29:37:54:a6:e5:fa:f0:27:36:b8:24:ad:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.18.slot.cdn.salesforce-communities.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.18.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.councilforinclusion.com
assets.vrmco.com
assets.vrmia.com
at.mexinsurance.com
betatest.movetia.ch
buy.casewareafrica.com
care.andjaro.com
carlo.private.lifen.fr
cdn.eu30.blitztesting.com
cdn.na114.blitztesting.com
cdn.na69.blitztesting.com
cdn.na89.blitztesting.com
client.lifen.fr
cmsannenberg.usc.edu
community.hivehome.com
delegazione.acifondi.it
exam.economicsolympiad.org
gestion.certisure.com
hub.midmrkt.com
knowledge.dpo.fr
market.imdadi.com
monespace.kley.fr
mymobilities.movetia.ch
offertes.energieinhuis.nl
offertes.suniverse.nl
one.planmeca.com
ortho.evenly.com
pardot.liveu.tv
partners.digital.ai
partners.mightyhive.com
patients.evenly.com
portal.ashlar.financial
portal.sieplo.com
pro-alliance.logitechg.com
prod.18.slot.cdn.salesforce-communities.com
registration.economicsolympiad.org
salesforce.focuspointsolutions.com
sf.energieinhuis.nl
sfdc-c4e.ab-inbev.com
shop.casewareafrica.com
siteforce.zlinekitchen.com
support.certisure.com
support.chamberlaingroup.com
support.corporate.ef.com
support.datasure.net
support.dias.nl
support.einride.tech
support.ionodes.com
support.itbrm.com
support.statflo.com
support.synergemtech.com
test.economicsolympiad.org
thehive.mightyhive.com
virtual.midmrkt.com
www.acifondi.it
www.buyitlocal.shop
www.compass-rent.com
www.compass-rent.it
www.compassrent.info
www.compassrent.it
www.fdemportal.com
www.floridacare4covidsm.com
www.hornbachprofi.nl
www.kaufregional.com
www.maascleanup.nl
www.myabiportal.com
www.nbusinessclub.com
www.partners.abb.com
www.profiservice.nl
www.safer-fl.com
www.woniru.com
www2.onia.pl
www4.customervalue-consulting.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.18.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFwe1xMtpu+T03FZO9c/
us0OcE1AfNb0j8c9SB8W6wkB/7g4M79U0Ee1+fPiqR/Mj1QFC71miFzmSt3U/C2Q
aseOVEYCUxzK2ZLhaWQVYaEY/mdP4u1pqCFHSQOLOyN5HpZjkv4WoVPNMvhIsnTG
z7vcQ6mFPMQkjVGMNEPtWN2P7kg2ywHKsGamAb9Uez8LA9K104iDFbVUnH9NFTll
fC8vE/BkqaGVGytKbvD38LVM01kiJxBH/W8/KSWTXDbqw0ur73BDFIKlPOygr0VE
e6rV9WKQRHDiKUxTKAA+q8id9BPQN+EbWKgQaj17MhZPTxozQarJN42Ca0WFjhcB
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404762387036753053168400819656610887122244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 13:39:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 13:39:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.18.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20748508310898200913679207320724323388184074374268167774471819549041948328171911722811572816258275296473267712952667255908649022132150424093844385276927246540072421790024867015091572931493739959237584170234461485367026743439231221583640428617808059893726834356961833614788303681098621067039089880635403407632773391271592267592984456206929383144593062406133554911673475427984321007616357264364460769421284984878216934634573902542620154918545416476391590240938714664493432362811409124456037446935844611089649804759463846633952508714043073687554780902015541560168742222500988017769649341008875230824754424737074098143553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3875c0c16f98bb954718d9f263aec498994d842d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.councilforinclusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vrmco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.vrmia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.mexinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betatest.movetia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.casewareafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.andjaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlo.private.lifen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu30.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na114.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na69.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na89.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.lifen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsannenberg.usc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.hivehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegazione.acifondi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exam.economicsolympiad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestion.certisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.midmrkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.dpo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market.imdadi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monespace.kley.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymobilities.movetia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offertes.energieinhuis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offertes.suniverse.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.planmeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ortho.evenly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.liveu.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.digital.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.mightyhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patients.evenly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ashlar.financial'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.sieplo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro-alliance.logitechg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.18.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.economicsolympiad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.focuspointsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.energieinhuis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfdc-c4e.ab-inbev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.casewareafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteforce.zlinekitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.certisure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.chamberlaingroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.corporate.ef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.datasure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dias.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.einride.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ionodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.itbrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.statflo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.synergemtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.economicsolympiad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehive.mightyhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtual.midmrkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acifondi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyitlocal.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compass-rent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compass-rent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compassrent.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compassrent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdemportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floridacare4covidsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hornbachprofi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaufregional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maascleanup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myabiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbusinessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partners.abb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.profiservice.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safer-fl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woniru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.onia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www4.customervalue-consulting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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