prod.29.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b2:b1:17:83:62:e6:a6:42:1b:f4:58:fc:12:18:48:a7:a1 was issued on by Let's Encrypt.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.29.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:b1:17:83:62:e6:a6:42:1b:f4:58:fc:12:18:48:a7:a1
Serial Number (int): 409254800481881110044419261258862103668641
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a0:51:d8:a1:43:08:8d:94:83:d7:2d:b4:ff:f2:09:d5:d8:4d:a5:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:e3:2c:5f:95:b4:34:99:3f:b8:fa:63:96:10:09:41:d7:79:4e:86
Fingerprint (sha256): 2f:8c:f9:95:f7:bd:8b:91:c1:26:d5:a6:87:fe:cb:de:79:88:e7:d2:2c:2d:a2:58:11:a5:f0:5f:e5:86:88:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.29.slot.cdn.salesforce-communities.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.29.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply.aua.am
birdseyecoupon.readyseteat.com
cdn.eu28.blitztesting.com
cdn.eu43.blitztesting.com
cdn.na131.blitztesting.com
cdn.um3.blitztesting.com
cms.acrotec.ch
coder.episource.com
coding.episource.com
community.qaa.ac.uk
contactus.conagrabrands.com
customercontactus.conagrabrands.com
customerportal.interlacehealth.com
distribution.st.com
duncanhines.conagrabrands.com
faq.bmw.ch
faq.bmw.co.za
faq.bmw.es
faq.bmw.pt
faq.mini.ch
faq.mini.co.za
faq.mini.es
faq.mini.nl
faq.mini.pt
gardeinchickn.readyseteat.com
greenwire.greenpeace.org.uk
healthychoicecoupon.readyseteat.com
helpcenter.conagrabrands.com
mariecallenders.conagrabrands.com
mk.kz.marykayintouch.com
mk.marykayintouch.ua
my.diehardassurance.com
my.geoslam.com
p.trustpayments.com
pardot.darren-evans.co.uk
pardot.rithom.com
partners.adyen.com
partners.n2media.com
prod.29.slot.cdn.salesforce-communities.com
restaurant.foodpanda.co.th
restaurant.foodpanda.com.bd
restaurant.foodpanda.com.kh
restaurant.foodpanda.com.mm
restaurant.foodpanda.hk
restaurant.foodpanda.la
restaurant.foodpanda.my
restaurant.foodpanda.ph
restaurant.foodpanda.pk
restaurant.foodpanda.sg
rlesa.repsol.com
salesforcecms.adstream.com
sfc.terry.uga.edu
sponsor.continuvue.com
suite.cm.tourlane.com
support.exact.com
support.lavu.com
support.n2media.com
support.zspace.com
uploads.episource.com
us.support.gohenry.com
www.diehardassurance.com
www.mycqstore.com
www.myindstore.com
www.restaurant.foodpanda.co.th
www.restaurant.foodpanda.com.bd
www.restaurant.foodpanda.com.kh
www.restaurant.foodpanda.com.mm
www.restaurant.foodpanda.hk
www.restaurant.foodpanda.la
www.restaurant.foodpanda.my
www.restaurant.foodpanda.ph
www.restaurant.foodpanda.pk
www.restaurant.foodpanda.sg

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.29.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HG0slaPW0J+QcxarTLj
JWM8EJg/1D9WdWP4wWy7mzE8YW0sRpZ1ZIysHSTMhsfZu+90xlJeBCVXtpmqurIp
ESZu9GGctBgHAk6egwVxOrHetzBleMu/yo0r2cAEA/TvzWsQprmjptg3OYmUrj+v
admiw0PI1VOOTBPym441nkHxEpoAMez2B+MYqb2BtZaIJYB25+M928O53KZgzp9R
ju1J+BXZ+xjmyr0FIg2O8VQPInEp3bkYU948ftHiDr/HC4bgVr/tyIja10M7FEWQ
pvLV92YmytdaAFCT2lWpM1E51/p3ZwbemhRWQEuO72wf9lE4gHaFdPXdDe68Gvc2
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409254800481881110044419261258862103668641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-26 21:09:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 21:09:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26313637875487176486211165180857761751433934378079381111982798961155054984487101353736463606535284094354958810737811494791500781299598137504626617513918329613879762464523546614238615544029568881557494553271760625331156061552023444944969538199727473587532996956320035974001433799126686382724569201148656195058763673066908252415489648119331752039850215476819768934325062247634200748969715279148408917594379854064672034052938172253969394338849216887717539328302077427092045610803168750319016005180164454990244840867817292185469230327109333557830873047303262579014858011934259511491156151040651482073868987490226174113393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a051d8a143088d9483d72db4fff209d5d84da5f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1788 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.aua.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdseyecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu43.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na131.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acrotec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coder.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qaa.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercontactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.interlacehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanhines.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeinchickn.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwire.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthychoicecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariecallenders.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.kz.marykayintouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.geoslam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.trustpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.darren-evans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.rithom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.adyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesa.repsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.adstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.terry.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.continuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.cm.tourlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lavu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.support.gohenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycqstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001823c8f10ea000004030046304402205c0d584690d4b5ad0c549debb23b7f02c2f56590319d8f66fa6b424d139da054022045013b10a6dc6240ae76c2d71abc040826a105abb72dc8295648f94d87c36e690075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001823c8f11ca00000403004630440220733b1614f42a20530fce5f221edb5e9b52a852d5fdb32cc6197eaa92dad3aee902206d67a430a2458755d8e71a00364d8439af131b158df98512de8204a03976b7fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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