prod.20.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:60:39:2c:3e:c7:eb:02:81:32:49:74:78:04:28:68:66:25 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.20.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:39:2c:3e:c7:eb:02:81:32:49:74:78:04:28:68:66:25
Serial Number (int): 294079960749860879941541564432866729289253
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:19:5b:6f:dc:72:b7:24:0c:07:95:74:67:ff:bc:68:35:dc:a6:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:20:04:ce:b5:f5:10:1d:d4:48:14:25:85:90:a2:03:a7:c9:38:7a
Fingerprint (sha256): 21:37:80:f5:94:ae:45:29:46:63:9f:ac:9d:ce:79:b0:e1:d1:3f:82:99:c2:a0:71:2a:fb:2f:89:3e:6f:dc:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.20.slot.cdn.salesforce-communities.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.20.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acspardot.alliedsvcs.com
bestpractices.myzenkey.com
bestpracticesdev.myzenkey.com
cdn.ap10.blitztesting.com
cdn.na103.blitztesting.com
cdn.na117.blitztesting.com
cdn.na126.blitztesting.com
cdn.na127.blitztesting.com
cdn.na142.blitztesting.com
cdn.na71.blitztesting.com
cdn.na90.blitztesting.com
cms.ementexx.com
cms.hassellstudio.com
cms.omada.net
cms.sfdctk.tk
cms.sterile.com
community.claris.com
community.commonpointqueens.org
community.envisagenow.com
community.newhorizonstas.org.au
content.medicomhealth.com
cp.axa.co.jp
directory.attachmenttraumanetwork.org
dreammn.demandchain.com
emailcdn.wharton.upenn.edu
equipomd.holadr.co
feedback.tagesspiegel.de
help.delpha.io
help.elationemr.com
help.makewonder.com
help.smarttrader.com
ic.verallia.net
knowledge.isnetworld.com
m.platinumassoc.com
marketing.avidratings.com
marketing.kirkpatrickprice.net
paciente.holadr.co
pardot.benenden.co.uk
pardot.chromacode.com
pardot.eaglehillconsulting.com
pardot.everylifetechnologies.com
pardot.fallcreeknursery.com
pardot.institutmontaigne.org
pardot.telkonet.com
partners.stardog.com
portalprivacidade.caixaconsorcio.com.br
prod.20.slot.cdn.salesforce-communities.com
reviewers.isnetworld.com
salesforce.oiprocesos.com
salesforce.oomen.group
salesforce.poka.io
salesforce.waltron.net
sf.aro-underwriting.com
sfc.lepide.com
shop.ingredion.us
snatest.blitztesting.com
solve.syntegritygroup.com
support-staging.tangogroup.com
support.claris.com
support.gloo.us
support.myzenkey.com
support.stardog.com
support.tigera.io
testcommunity.fireeye.com
udn.unrealengine.com
www.balasfdc.com
www.busypulse.com
www.logisticscenter.online
www.monxplornet.com
www.mpchaulers.com
www.myxplornet.com
www.platformdemos.com
www.testgecares.com
www3.ecentime.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.20.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZjHZoOQqmo9LsuM1aZ9
/X7C4tkzXkjaRmmMhg2vxerrlKVQXe3Jy8qbinIbYpGKBIJevDVUB90jVRX3wO4N
ZRDvAcAL/RVRhwBffiOUW6Hwur/EnqbzTE6MvHjQTU61dcB+qZcIecj+ylhtpLkj
XxErIVR5jnASMkEFzQKURBcXagTcp1dzIIS57wRXTeeT4IqyUELuteM+rPizWb3J
sJtTThSeBk6dq7l2vPrf4+hkiUtxfL2Ff4dtVfB3im+CJLQ1w6uHwLV3fBiqB099
bsxnxTzYj7zzsTTxyj67o4iEtTtn7gDxTshMu+VFn8GhL2I491R0mEo3RFmcK1Uv
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294079960749860879941541564432866729289253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-08 11:22:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-06 11:22:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27469050265052759896424384461074418260735471079710723509745622670358713433642165131699664191175771063313750712445728616945855036238303255398869487199730153064065552575433896957288126520650899169910728128403997603079499749683639941075292413090649162411263057909063936915363972220714888430661071580530609066550387050548950176492160815457536896752972856130568515007725184735824964576442231031976279155580669265194111965907463053025835878231919454210592567682202279741037595870064320933053086454713338317958403555167918423331929444279930259416228993377159404354903040226113618775344346516732387536725170974318745840070427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23195b6fdc72b7240c07957467ffbc6835dca614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acspardot.alliedsvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpractices.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpracticesdev.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap10.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na103.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na117.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na126.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na127.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na142.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na71.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na90.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ementexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.hassellstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.omada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sfdctk.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sterile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.commonpointqueens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.envisagenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.newhorizonstas.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.medicomhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.axa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.attachmenttraumanetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreammn.demandchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcdn.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipomd.holadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.tagesspiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.delpha.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.elationemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.makewonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.smarttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic.verallia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.platinumassoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.avidratings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.kirkpatrickprice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciente.holadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.benenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.chromacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eaglehillconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.everylifetechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.fallcreeknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.institutmontaigne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.telkonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprivacidade.caixaconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewers.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oiprocesos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oomen.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.poka.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.waltron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.aro-underwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.lepide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ingredion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snatest.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solve.syntegritygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-staging.tangogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gloo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tigera.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcommunity.fireeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udn.unrealengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balasfdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busypulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticscenter.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpchaulers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformdemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testgecares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.ecentime.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017811c98e450000040300463044022004f3bdc518d493f6058c7dca467086350b7a447b6d4628aceee266a62e53db56022010911c5f34768ee85bb022c9cffd3b38fa12e3b63de1b8cacbc40bc90b9e434d0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017811c98e8e000004030047304502206caed525d757602a586fb2c1799a8ddd16503e6991fd258d14da0799e8bd8d10022100fd4d2b42967bef82e4f0435c3616be69e20492a40e2893b230404af00e335346
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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