prod.22.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:30:7e:0a:f3:7f:d8:16:c3:a9:c7:e2:31:22:c5:72:7e:52 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.22.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:30:7e:0a:f3:7f:d8:16:c3:a9:c7:e2:31:22:c5:72:7e:52
Serial Number (int): 364950236928437904190150037148284105162322
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2f:b6:73:56:47:a0:9d:5e:43:d5:86:8f:77:5b:6d:8b:82:88:16:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:09:5c:bd:37:05:58:8a:73:6b:b9:a9:4e:16:10:13:92:bd:07:f4
Fingerprint (sha256): 24:2a:b6:0b:d2:fa:b4:e2:04:c1:36:7d:f5:98:02:a8:cc:34:27:ff:52:c5:03:68:61:a7:a0:34:32:c8:9e:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.22.slot.cdn.salesforce-communities.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.22.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aafp.org
app.designschedule.com
billinghelp.datto.com
build.ibotta.com
buyer.trimetisls.com
careers.rosetreesolutions.com
cdn.ap21.blitztesting.com
cdn.na115.blitztesting.com
cdn.na46.blitztesting.com
cdn.na62.blitztesting.com
cdn.na66.blitztesting.com
cdn.radleys.co.uk
clientportal.leap.co.uk
clientportal.leap.com.au
clientportal.leap.us
cliniciansupport.propellerhealth.com
coda.wiley.com
cognitiveautomation.aeratechnology.com
community.clickability-test.com.au
community.clickability.com.au
community.flexischools.com.au
community.zaliet.com
contentcommunity.leaplegalsoftware.com
fans.lightning-seb.com
faq.fair.com
help.adra.com
help.datto.com
help.leap.co.uk
help.leap.com.au
help.leap.us
help.paramountplus.com
help.stratisiot.com
help.stratisiot.net
help.weedmaps.com
join.shortsaleforce.com
knowledgebase.statsols.com
marketing.westlakeplastics.com
marriott.lifefitness.com
mijn.ditiswijs.nl
mk.marykayintouch.com.ar
mk.marykayintouch.com.br
mk.marykayintouch.com.co
mk.marykayintouch.com.mx
mk.marykayintouch.com.pe
mk.marykayintouch.com.uy
my.shortsalepilot.com
nook.pathfactory.com
pardot.reseau-selection.com
pardot.selectionretraite.com
pardot.studentleadershipnetwork.org
partners.magmutual.com
portal.bwalkrealty.com
portal.wollondilly.nsw.gov.au
prod.22.slot.cdn.salesforce-communities.com
remotesetup.leaplegalsoftware.com
secure.shortsaleforce.com
sf.padtinc.com
strategy.rosetreesolutions.com
supplier.trimetisls.com
support.paramountplus.com
supportcenter.webablls.net
wbp-admin.wiley.com
wbp.wiley.com
www.1mission.org
www.aesenergiamais.com.br
www.cloudcompliance.live
www.datto.help
www.embraer-eams.com
www.privacy.cloudcompliance.app
www.privacy.plumcloudlabs.com
www10.jameslunan.com
www3.woodruffsawyer.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.22.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF1NBCLPvYlCjWjFRk3L
RMXDJf+kBZsnCN3gxnGkT7sXhn2kkgY+qXLvuEmN1Ngcr0rqcRJPi+pD1n01LvzU
EuV2HRlx6FURsCvwAQSf7aSAxW9C/uQ6OqcECI6Ojh+Owa5F0xcYRXk8jMLu7Oi3
0asNOWZLP+2mfDavNyBGr+HjRm90G6Fqs4mLzLICpQegsTutBt154qYRclVxSAej
HHY80uDl4HIDemeHDqzri2d+dscpKkAJHsjBAb9/P4iwTeSiyNb1ADuwOW4jd8+r
IFKwr0dH/xZCpyahUpMmcF1MhOnwLtdQisT0hXHSuQIopV07rsDzZn8CPUpywBT5
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364950236928437904190150037148284105162322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-17 12:11:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 12:11:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22768903254999610074620704051369361252108578315885880126536271494166357169977570177860598850858147986012981355344094371176668892408238048432316576890820805440878081217453298977807906351105669365910625098591570142691053114228450702789202894900879874622270358799485553704184082281798021039734518904476081505572444633989192569073764230970364166248045239645209588643309776911825577384719010994503035073501859044120183518576993459239960996821325736452124507027555768819967119602783720695954067208830476513215210553095355796583243254342336254452000819680575306316320450226169039137895608970854352590464003653406185452009749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fb6735647a09d5e43d5868f775b6d8b8288166f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aafp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.designschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinghelp.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ibotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyer.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na115.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na46.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na62.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na66.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.radleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniciansupport.propellerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiveautomation.aeratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability-test.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.flexischools.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.zaliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentcommunity.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fans.lightning-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.fair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.shortsaleforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.statsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.westlakeplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.lifefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.ditiswijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shortsalepilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nook.pathfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.reseau-selection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.selectionretraite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.studentleadershipnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.magmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bwalkrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wollondilly.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesetup.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shortsaleforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.padtinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.webablls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp-admin.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1mission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aesenergiamais.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudcompliance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datto.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraer-eams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.cloudcompliance.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.plumcloudlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10.jameslunan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.woodruffsawyer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000178405013af00000403004830460221009df084947cbed9603ac2ad70f239d8eef8b8e4f343ffbf71f5f8dd9f06298fe8022100b6e3a2e7af1a728322f38a2ac237bf28cdb1dc030ce3a4d08bd2a40ab3cd5db90077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178405013be0000040300483046022100a95aca8ced5eb65a099b8cae0125bf0b29620d169bd33c2bdde3795ff4181687022100fda3ae2913548b127f4ff710b46e58b5e5c3a61454a3587c1d295809d397de0b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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