prod.13.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:10:5a:8d:40:df:ae:b6:8f:8c:8e:5a:96:4a:c3:53:aa:43 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.13.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:5a:8d:40:df:ae:b6:8f:8c:8e:5a:96:4a:c3:53:aa:43
Serial Number (int): 354014025547049863809653704381926623914563
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: eb:c6:50:56:15:83:df:99:82:8e:7d:4b:ec:de:92:10:1f:37:dd:b5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:4b:9c:c1:af:16:b4:94:ca:4f:b2:dd:30:8b:cb:4d:d7:54:5e:52
Fingerprint (sha256): 29:dd:e7:99:25:6f:71:29:f6:d4:40:94:b1:d6:d5:14:4c:78:38:a1:d0:38:6d:d2:d6:e5:68:97:ad:42:b1:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.13.slot.cdn.salesforce-communities.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.13.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.verallia.com
assets.run.aeb.com
b2b.fruit.com
b2breturns.gopro.com
bioadvancemember.ca
cdn.ap12.blitztesting.com
cdn.ap22.blitztesting.com
cdn.ap26.blitztesting.com
cdn.ap28.blitztesting.com
cdn.eu36.blitztesting.com
cdn.na104.blitztesting.com
cdn.na109.blitztesting.com
cdn.na121.blitztesting.com
cdn.na149.blitztesting.com
cdn.na151.blitztesting.com
cdn.na155.blitztesting.com
cdn.na202.blitztesting.com
cdn.usa1.blitztesting.com
cms.alukoenigstahl.com
cms.arno.de
cms.rajapack.be
community.disguise.one
community.mdmep.org
community.tcpsoftware.com
consumercare.coscokids.com
content.aligroup.com.au
content.ingroupe.community
customer.progressa.com
customer.resmed.jp
customers.spryker.com
engage.flexpricer.com
es.verallia.com
falconprod.blitztesting.com
go.zebra-med.com
go2.prodomo.fr
help.avidxchange.com
host.yooralla.com.au
images.iscsrl.com
images.stoneco.com
info.airinnovations.com
info.stjohnvic.com.au
loja.sol-m.com
mail.aiacommunity.com
marketing.diag.bracco.com
mineralsinfo.global.weir
mode.wesgroup.ca
my.centaman.io
my.solidify.com
mycevora.cevora.be
newshop.heidelberg.com
originate.mtg.loan
pardot.eu.vipre.com
pay.healthengine.com.au
pipardot.predictiveindex.com
pom.ywamships.org
prod.13.slot.cdn.salesforce-communities.com
pt.verallia.com
rews.salesforce.com
salesforce.microstrat.com
salesforce.standards.org.au
salesforcecms.recent.kr
sfcms.armentekort.be
sfcontent.sharedhope.org
sfcontent.vbrick.com
sharedg202test1.blitztesting.com
successhub.mtcaustralia.com.au
support.calytera.com
support.mapanything.com
support01.calytera.com
ua.verallia.com
university.groople.com
usa1.shared.blitztesting.com
usa1.tmr.blitztesting.com
whexceptions.gopro.com
www.fieldservice.act.gov.au
www.notify.worksafe.act.gov.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.13.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+k0QQJ1fLlsc3MOwVn+q
GMOSH1PEvkaZfi4LGiLhgCQMxS5tAhQsQr3z7SDHLn2AKi0WMP2LkVcvFf8KlSEg
jsPvUWwrPdGJTJVZASkN69DepGBA2aSvrtqWOjU4mh9idjZQZGrYhngaNKyZ0EQ+
g6j7jHK23Ea0gFswi52v0DjhKGDBTWJYsHO4HhvPTIjMCUrjKYalwqyiNaHqCH7d
CDa8nNw7dd9p4isw0hwnlHQTRrd1qMYDbPCw1iSHQvRbDgeoQ5GfR7pOInDWs2Cm
od8W9eG7Gy9lsTY7eNDqWQVa4egFJvptkOKRBuR6GB+1BBCP6yCHoJQybfCCn3A/
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354014025547049863809653704381926623914563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 07:12:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 07:12:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31597577662765312934544057900307727777212913230247713419961711817483706752345833285034771023583728973062739145300266446573956329648901938835395687402527087619048986921202357018004760074678718427281280710617743026329583003762732208176502569801533641467024971783908891410099240055856604708890069189679014835005733188318232448649231984298749335022205415125697839967845241246593590800912184171950975648174461034264699110817334253294431183543315591863706705783465868357749283346300986111459453758306769475739035142086029777562212030639656689503259371488476983592932930598930835551580457739306696653604368158530059608539017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebc650561583df99828e7d4becde92101f37ddb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1821 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.run.aeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.fruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2breturns.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioadvancemember.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap12.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap22.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap26.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu36.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na104.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na109.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na121.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na149.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na151.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na155.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na202.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.usa1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.alukoenigstahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.arno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.rajapack.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.disguise.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mdmep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.tcpsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumercare.coscokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aligroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ingroupe.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.progressa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.resmed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.spryker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.flexpricer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconprod.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.zebra-med.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2.prodomo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.avidxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.yooralla.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iscsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stoneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.airinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.stjohnvic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.sol-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aiacommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.diag.bracco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralsinfo.global.weir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mode.wesgroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.centaman.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.solidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycevora.cevora.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newshop.heidelberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originate.mtg.loan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.healthengine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipardot.predictiveindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pom.ywamships.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rews.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.microstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.standards.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.recent.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.armentekort.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.sharedhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.vbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedg202test1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successhub.mtcaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.calytera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mapanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support01.calytera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.groople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa1.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa1.tmr.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whexceptions.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldservice.act.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notify.worksafe.act.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183c0f3ee6a0000040300473045022100d38e97e24303e18216e1c3244f37cd355e019d3378b83fec1fbfdc697230a28102204d331b05e67d2e6d311b54f0e96977a935149c8f4cce01a82edffe6009f60e580076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183c0f3ee86000004030047304502210086b6a05b4f4b16f949f3ff8a4495de4f5e6ba8813ca4f7565c61aab9e8a59def02201727126148f22d88feececab370f697f7ec8a7ede2a3e379c986f61f1af40ef9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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