prod.22.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:45:cb:2f:5d:cd:27:b2:12:7a:61:e5:98:12:15:a3:f6 was issued on by Let's Encrypt.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.22.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:45:cb:2f:5d:cd:27:b2:12:7a:61:e5:98:12:15:a3:f6
Serial Number (int): 429188836415979807094051862306830970889206
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:a8:83:15:f6:d8:f0:52:35:08:cb:87:94:1d:5e:1b:dc:8f:60:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:23:21:14:5d:1b:09:39:97:22:c9:64:7d:da:6c:b4:47:f8:ed:83
Fingerprint (sha256): 2e:0f:05:f8:15:8e:d3:9e:c2:7b:ab:bc:09:5e:0e:c4:69:39:de:84:0a:58:d4:97:41:15:fb:17:1f:9c:cb:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.22.slot.cdn.salesforce-communities.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.22.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aafp.org
app.designschedule.com
beta.dutytocare.info
billinghelp.datto.com
build.ibotta.com
buyer.trimetisls.com
careers.rosetreesolutions.com
cdn.ap21.blitztesting.com
cdn.na115.blitztesting.com
cdn.radleys.co.uk
clientportal.leap.co.uk
clientportal.leap.com.au
clientportal.leap.us
cliniciansupport.propellerhealth.com
cms.schoolinks.com
coda.wiley.com
cognitiveautomation.aeratechnology.com
community.clickability-test.com.au
community.clickability.com.au
community.zaliet.com
conquipcustomers.cqegroup.com
content.opencorporates.com
contentcommunity.leaplegalsoftware.com
fans.lightning-seb.com
faq.fair.com
gs01.designportal.ca
hello.energyaspects.com
help.adra.com
help.datto.com
help.leap.co.uk
help.leap.com.au
help.leap.us
help.paramountplus.com
help.stratisiot.net
help.weedmaps.com
help2.marc-goldstein.com
join.shortsale.co
knowledgebase.statsols.com
marketing.westlakeplastics.com
marriott.lifefitness.com
mijn.ditiswijs.nl
mk.marykayintouch.com.ar
mk.marykayintouch.com.br
mk.marykayintouch.com.co
mk.marykayintouch.com.mx
mk.marykayintouch.com.pe
mk.marykayintouch.com.uy
my.shortsalepilot.com
nook.pathfactory.com
pardot.cloudfocusweekly.com
pardot.reseau-selection.com
pardot.selectionretraite.com
pardot.studentleadershipnetwork.org
partners.magmutual.com
portal.bwalkrealty.com
portal.wollondilly.nsw.gov.au
prod.22.slot.cdn.salesforce-communities.com
remotesetup.leaplegalsoftware.com
sf.padtinc.com
strategy.rosetreesolutions.com
supplier.trimetisls.com
support.paramountplus.com
supportcenter.webablls.net
test1.lookingonward.com
vax4nvclinic.nv.gov
vkgs0shared.blitztesting.com
wbp-admin.wiley.com
wbp.wiley.com
www.1mission.org
www.cloudcompliance.live
www.datto.help
www.embraer-eams.com
www.hcp.meadjohnson.com
www.privacy.cloudcompliance.app
www.privacy.plumcloudlabs.com
www.sampling.meadjohnson.com
www3.woodruffsawyer.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.22.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JgMCjJKAfRA90glZYtx
5EWf7SNW74uUe/GsPB6uMNKi9aif21t3i2cU9hMahpVcgPSH4gN1TZ1+Fxz6WxWd
E/64SFvTPo9lnaUjuGAkRZEtoJgAKhpvO3CLreVURESmsjqRqx6xC2OOC2388Z3u
Vf0OR+NtgdHBXPh8m7O5NisYv7Yg4qz3vuH8iXYGIgTeVd/f6N1whPbsz/kuOsRJ
tK4oYJrJcXh1F75JJuO2Fv0hvGIMD5K5llvdPOknk0Z2jke8jJHGiIdWqM+eKPae
W7artmzrIlbGUc0K+5+tQpjoiHV8frxxfTR0J8ufAz7p0qP3ylHas6O0opHaQHNp
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429188836415979807094051862306830970889206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 16:39:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-23 16:39:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26332544618159793333407992613678017410888484039048985932798569414527766821574138405412161886763965664776346842464361033445773206076408763782588372992493274179266893509881782158485227528699673385182639741868559260324150715876128452449596904450354206480958189349216285417283856843453841475096819052198272640664411322298033914278422134063394728253323342265456328742582879556966708559342305994110232889960280771936673631195091313841009214791207124777533069256305629102796478812854016458971442887802373623724018875698126504002127841212286703104226934999582545339768563163074985385882165949992215772081602268472069835680007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2a88315f6d8f0523508cb87941d5e1bdc8f60fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1937 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aafp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.designschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.dutytocare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinghelp.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ibotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyer.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na115.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.radleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniciansupport.propellerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.schoolinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiveautomation.aeratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability-test.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.zaliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquipcustomers.cqegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.opencorporates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentcommunity.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fans.lightning-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.fair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs01.designportal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.energyaspects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help2.marc-goldstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.shortsale.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.statsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.westlakeplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.lifefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.ditiswijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shortsalepilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nook.pathfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.cloudfocusweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.reseau-selection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.selectionretraite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.studentleadershipnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.magmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bwalkrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wollondilly.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesetup.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.padtinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.webablls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.lookingonward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vax4nvclinic.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vkgs0shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp-admin.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1mission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudcompliance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datto.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraer-eams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcp.meadjohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.cloudcompliance.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.plumcloudlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sampling.meadjohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.woodruffsawyer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000180fc4d98a40000040300483046022100cadac985a66ca4edf9a88bff60fc0c427feda3bf9a14b4d27f1055ad3f9377e90221009aaf419fa6956a69e70e9fb412c19bf06f2923ca338862c8ef5caad76e658bf100750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000180fc4d98f40000040300463044022077e62dae8a555b789a50b9ad91947763f6e8e226432156b45b2b6e7c74cc6fba0220403b437ee623e5c558998a92e7d59b0210b39d58d72c400a30160bc4b9ea760e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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