prod.20.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2d:f8:e8:18:59:2c:a0:8e:91:60:ca:ed:4f:85:6e:a7:50 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.20.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:f8:e8:18:59:2c:a0:8e:91:60:ca:ed:4f:85:6e:a7:50
Serial Number (int): 364092703888152005052068105420985647146832
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:aa:9e:0d:38:ea:aa:b3:2a:b3:de:dc:46:00:3b:bd:27:ab:2f:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7e:8e:c8:54:55:b9:fb:a8:46:30:44:7e:8d:be:63:6e:51:89:71:1b
Fingerprint (sha256): 2b:56:8b:33:24:6b:a7:14:0e:8d:44:6b:8b:24:61:87:99:27:23:c8:ee:fb:8f:97:e9:f4:a2:a4:97:e1:bc:a3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.20.slot.cdn.salesforce-communities.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.20.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aide.soquij.qc.ca
bestpractices.myzenkey.com
bestpracticesdev.myzenkey.com
cdn.ap10.blitztesting.com
cdn.na103.blitztesting.com
cdn.na117.blitztesting.com
cdn.na126.blitztesting.com
cdn.na127.blitztesting.com
cdn.na142.blitztesting.com
cdn.na71.blitztesting.com
cdn.na90.blitztesting.com
cms.econsult.net
cms.ementexx.com
cms.hassellstudio.com
cms.sterile.com
community.claris.com
community.commonpointqueens.org
community.envisagenow.com
community.newhorizonstas.org.au
content.persax.es
content.unearthed.greenpeace.org.uk
cp.axa.co.jp
directory.attachmenttraumanetwork.org
dreammn.demandchain.com
emailcdn.wharton.upenn.edu
events.tractionondemand.com
help.delpha.io
help.elationemr.com
help.makewonder.com
help.salesloft.com
ic.verallia.net
knowledge.isnetworld.com
marketing.kirkpatrickprice.net
marketinglive.cedre.info
pardot.aboutsage.com
pardot.benenden.co.uk
pardot.chromacode.com
pardot.colonialbus.com
pardot.eaglehillconsulting.com
pardot.everylifetechnologies.com
pardot.fallcreeknursery.com
pardot.institutmontaigne.org
pardot.telkonet.com
partners.stardog.com
portalprivacidade.caixaconsorcio.com.br
prod.20.slot.cdn.salesforce-communities.com
reviewers.isnetworld.com
salesforce.fsa.valantic.com
salesforce.oiprocesos.com
salesforce.oomen.group
salesforce.poka.io
salesforce.waltron.net
sf.aro-underwriting.com
sfc.lepide.com
shop.ingredion.us
snatest.blitztesting.com
solve.syntegritygroup.com
support-staging.tangogroup.com
support.claris.com
support.myzenkey.com
support.stardog.com
support.tigera.io
support.unifyordering.com
testcommunity.fireeye.com
udn.unrealengine.com
www.logisticscenter.online
www.monxplornet.com
www.mpchaulers.com
www.myxplornet.com
www.platformdemos.com
www3.ecentime.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.20.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3C4aVYDUkZXiu+ZLCO++
SXReraZ+Q1rG7brafTGabTkbKQQaEZrP8836XiYU63uKdP9Gb49e0TUjPp3vwMk5
vmeoC+2JyU9IPeIDhzFPE2wX62Q+olxOqJERFNvokVEFnGV1FxYUJ9SU/FHpN9wm
gIZZY563MdPrajYN2vQAX+6tItly4CtXJTk16FSjKKkkgUBfquteYrbZcUez+b/5
whyEhFRMnET34l6YhZU6dv0SEA93SNepanLhGBmxriUthYslV7K05sHZfuxwJ/xq
xvrqMjdxuKq0OEmZILpXHnX6lOAFc5ilLyAn1g+wOXizXmD9OuWgxyio+vWfqA+W
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364092703888152005052068105420985647146832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-24 06:22:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 06:22:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27795161263651522671379686989290290570031220795836484362399304338463518187151639129217763012923900017941505050066690388992176321948909775489559646442829658001560446296836154898800900727206593096342588601487521572518445122118583814739483245869347054132130357144227590074418921519128324965675235080676871883103920924189284168511949809555312554854680092723019045912439468603642011298915374285344499680812624866029893284306735636572693939709852986676508654453249694139872628630510078638422042054355771481066112080312545529523524925661242040876513262858488995826461757341357418392297873136456392435762835107777420532356741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3aaa9e0d38eaaab32ab3dedc46003bbd27ab2f3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aide.soquij.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpractices.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpracticesdev.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap10.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na103.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na117.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na126.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na127.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na142.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na71.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na90.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.econsult.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ementexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.hassellstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sterile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.commonpointqueens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.envisagenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.newhorizonstas.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.persax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.unearthed.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.axa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.attachmenttraumanetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreammn.demandchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcdn.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.tractionondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.delpha.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.elationemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.makewonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.salesloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic.verallia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.kirkpatrickprice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinglive.cedre.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.aboutsage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.benenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.chromacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.colonialbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eaglehillconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.everylifetechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.fallcreeknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.institutmontaigne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.telkonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprivacidade.caixaconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewers.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.fsa.valantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oiprocesos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oomen.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.poka.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.waltron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.aro-underwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.lepide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ingredion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snatest.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solve.syntegritygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-staging.tangogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tigera.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.unifyordering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcommunity.fireeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udn.unrealengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticscenter.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpchaulers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformdemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.ecentime.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001819497a3110000040300473045022100e3c02002435d26f9d9724c9f50b44337d129340ec05dfd33a391bb772cb658e502201b27b61447b3aa8d291b7cdec8d15c8712081760564ad6c90cbd19c0759dbf250076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001819497a3c90000040300473045022100faa3c0a81a58fab8196cd024f5feefd7f6e8e90cf7142a4d6a1c94ea62b3c02a02201d82a40545134155dee7246c59bc9c5d338cd3b506d6a08c445fc702124d90bf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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