prod.22.slot.cdn.salesforce-communities.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ef:95:9b:76:6c:74:ae:37:03:4c:cd:a2:53:7b:73:bc:42 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.22.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:95:9b:76:6c:74:ae:37:03:4c:cd:a2:53:7b:73:bc:42
Serial Number (int): 429975491600447390374047797172611084172354
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 55:8c:32:2e:f2:f7:9c:33:30:f7:26:b9:3b:65:42:ce:1a:29:dd:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:65:76:52:58:de:81:b1:13:ac:72:a3:d1:99:67:46:1f:8f:49:d6
Fingerprint (sha256): 28:78:3c:41:7e:c6:c5:9d:06:96:21:78:41:30:e4:81:ea:28:f1:ea:63:cc:91:80:17:44:a1:cf:49:8a:94:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate prod.22.slot.cdn.salesforce-communities.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.22.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aafp.org
app.designschedule.com
billinghelp.datto.com
build.ibotta.com
buyer.trimetisls.com
careers.rosetreesolutions.com
clientportal.leap.co.uk
clientportal.leap.com.au
clientportal.leap.us
cliniciansupport.propellerhealth.com
coda.wiley.com
cognitiveautomation.aeratechnology.com
community.clickability-test.com.au
community.clickability.com.au
community.flexischools.com.au
community.ruralhealthpro.org
community.zaliet.com
contentcommunity.leaplegalsoftware.com
fans.lightning-seb.com
faq.fair.com
help.adra.com
help.cbs.com
help.datto.com
help.leap.co.uk
help.leap.com.au
help.leap.us
help.stratisiot.com
help.stratisiot.net
help.weedmaps.com
join.shortsaleforce.com
knowledgebase.statsols.com
marriott.lifefitness.com
mijn.ditiswijs.nl
mk.marykayintouch.com.ar
mk.marykayintouch.com.br
mk.marykayintouch.com.co
mk.marykayintouch.com.mx
mk.marykayintouch.com.pe
mk.marykayintouch.com.uy
nook.pathfactory.com
partners.magmutual.com
portal.bwalkrealty.com
portal.marcelluscoalition.org
prod.22.slot.cdn.salesforce-communities.com
remotesetup.leaplegalsoftware.com
secure.shortsaleforce.com
strategy.rosetreesolutions.com
supplier.trimetisls.com
supportcenter.webablls.net
test-support.a.zenfolio.us
www.1mission.org
www.cloudcompliance.live
www.datto.help
www.embraer-eams.com
www.privacy.plumcloudlabs.com
www.tokzon.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.22.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsb9ce/KRxd72TYUK0Zh
R7KJgWmdyuMR3ERupvA83QwmKhFXpAROL5/cTer3QT/+fcjQR0o9/UxFtBuKju9M
YAUkTLMGj1V3hBfweAa9kYllFFriV0vgHY3SFcqIj6B7NafrHEgv0ybJMNlO84Se
e+/c7hbW+SmHOssxEPwjK+KVXFYRV1NOJ25+IMQ3gcE5mwntkDs7gfjksZUB9bBR
C3jDkJQhQ7AhawD8qWhP5MUVH1+//5FCqT2T+5IpbJReXBW0nF4DkvZZXS3NCxHO
AmkR87w9EQIt5rn+XdCAbQL2lWtfksBu2NXArnVTdy4/xzoVX5+3cgYnF1FS2d7Y
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429975491600447390374047797172611084172354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 12:44:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-18 12:44:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22063590700043099296870670870793640999306543903627985579807506284092521786724420346469895072572069558789143495992197291393728637826839371462190913064394812511703328018399373237668584932535888297627572744481831782312205118571222405586367823789809221168661966430063366038053934244606178481310622952863845005594221840868655098367195364276858011762331897262093448122646223412879052234091637526773180076756408572854399493906026960866009003624531801948710921197329619992047124611620510350233326603947958198206142460564177900541211602666296024611974782635388352669553842684862000332005595113686773498796915051316364210788493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							558c322ef2f79c3330f726b93b6542ce1a29dd02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1390 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aafp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.designschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinghelp.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ibotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyer.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniciansupport.propellerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiveautomation.aeratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability-test.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.flexischools.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ruralhealthpro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.zaliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentcommunity.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fans.lightning-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.fair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.cbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.shortsaleforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.statsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.lifefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.ditiswijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nook.pathfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.magmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bwalkrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.marcelluscoalition.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesetup.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shortsaleforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.webablls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-support.a.zenfolio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1mission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudcompliance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datto.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraer-eams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.plumcloudlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokzon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001754641204e0000040300483046022100967cd74878fc7954f6de2ca0fbac770961b65add0d57809302ea82954d2143aa022100ed7e8bcebb4cdd5d15336a2ce9f5ad85670bad1ec490df632ec47ea1393bf6a50076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c200000175464120910000040300473045022051531f6b2055879af72fba7e091dfe41a2aef29139b4d26cbde72b1327d63268022100b1faeaf98c0a2035b87cddf36d2bd8e6ac1dc6a88965d33be348c8018a9e9126
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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