prod.12.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:e4:58:7e:dd:dc:94:4b:83:ed:91:7b:e6:26:8d:86:c8 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.12.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:e4:58:7e:dd:dc:94:4b:83:ed:91:7b:e6:26:8d:86:c8
Serial Number (int): 405920104848082460287751929946619155154632
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:e8:51:ef:2c:65:65:ac:06:1a:aa:ce:23:b8:06:54:e8:78:c7:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:6b:15:3a:50:e1:a3:31:dc:49:4a:43:ac:7b:4f:95:62:6c:bf:7b
Fingerprint (sha256): 30:ab:c1:11:21:51:d1:f8:3a:0c:15:68:13:7f:56:5a:25:29:ce:36:05:20:71:9c:10:50:a1:9e:0e:05:f1:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.12.slot.cdn.salesforce-communities.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.12.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.inquirer.com
agency.nycers.org
articles.coronafacts.com
aws.nmb.gov
cdn.ap20.blitztesting.com
cdn.na21.blitztesting.com
cdn.na85.blitztesting.com
clients.lexmedicus.com.au
cms.aquant.io
cms.classvipartners.com
cms.forensicanalytical.com
cms.ufm.edu
community.greencamps.org
community.ymcasf.org
compliance.liqid.de
consumidorfaq.eudora.com.br
contacts.bayareametro.gov
content.nbcuni.com
courtyard.law.ou.edu
email.truelearn.com
experts.lexmedicus.com.au
hello.addigy.com
help.stellainsurance.com.au
help.workgrid.com
helpdesk.edsurge.com
info.microbiologics.com
info.theretirementsolution.com
it.qqcw.us
itsc-demo-config.tanium.com
m.perkville.com
medical.nycers.org
members.cyber.nj.gov
my.airforce.com
my.ymcade.org
mynycers.nycers.org
njshield.njohsp.gov
ops.patientportalky.com
p.cbhhomes.com
pardot-uk.eu.vipre.com
pardot.beyondpay.com
pardot.lexmedicus.com.au
pardot.soljit.com
pardot.stradigi.ai
pardot.tdwilliamson.com
pardotcms.dbu.edu
partners.cyber.gov.au
partners.cyber.nj.gov
partners.panduit.com
partners.streamsets.com
pfhsfcms.jacksbasket.org
portal.coolgardie.wa.gov.au
preferredplayer.fila.com
prime.chrisstewart.com.au
prod.12.slot.cdn.salesforce-communities.com
retailer.charlottesweb.com
sales.optios.com
salesforce.jae.com
salesforce.koresoftware.com
salesforce.optios.com
sigma.sforcedemo.com
support.apricot.info
support.salsify.com
support.socialsolutions.com
support.stedwards.edu
tdwaccess.tdwilliamson.com
testsupport.stedwards.edu
www.agriskportal.com
www.clipperstartcard.com
www.cochezycia.com
www.communitytrustcafe.com
www.csiselementary.org
www.dornierdirect.com
www.icpemployeecommunity.com
www.icpmasterworkscommunity.com
www.interview.qualifyde.com
www.jimukyoku.cloud
www.learnexperiencecloud.com
www.lymi.fund
www.lymi.org
www.ochsnerdesign.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.12.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4uGVrbp6x9smvADKte4
8aJuTM4ua58QBIcFKDfrfOjl+LbIW3mmGKP2OAHSoFKp7iZe3VdmNsl3P42RlWcD
/EICtHORmmzoSPJ+KbOp40SKLhujq47Pumn82ORgN+Pp3uuTmNOGnXOvWUD2amTa
NnQOvTtAr1KaSe4lDvl5Rb8ycGWjSs163f9p93/Yv1XItxcHNybWwe7Q+xFthu2s
zkpWi9Jsb6bL9Dk66ro7UjEqksNHXfXYoHi1SDH/CvaoWgvKozcupCoIFJ5VOZ9m
eY6y1ZhJClC5tIyeYiRAD9gL3tL7Wwphl49KNyHjy927QHqSignoO7stVZakgEgc
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405920104848082460287751929946619155154632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-07 15:32:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 15:32:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23170412032563366200463744273350354922102576729867637456687051913875717113290438289835168566362323712192755139657735312313556404837995347617386043240837279131267399157317888927786066967394791612422778955982074535192729513765460678841573031992985712715044613898057717617013265377724385103339065703299363904358538681806910777943767862470800435374739787567147043426086515136325881588451651158366227227536389222581197441738332896515748009826440587471401701596699134791157588316477157784856629104843638380042837999879122064100397237391783784754279285178645038773795034661871669534809382592020822330669754601480943519144963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65e851ef2c6565ac061aaace23b80654e878c74b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1877 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.inquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.coronafacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.nmb.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap20.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na85.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.aquant.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.classvipartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.forensicanalytical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ufm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.greencamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ymcasf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.liqid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumidorfaq.eudora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.bayareametro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtyard.law.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.truelearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.addigy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stellainsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.microbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.theretirementsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.qqcw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsc-demo-config.tanium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.perkville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ymcade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynycers.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njshield.njohsp.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.patientportalky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.cbhhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot-uk.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.beyondpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.soljit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.stradigi.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotcms.dbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.panduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.streamsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfhsfcms.jacksbasket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.coolgardie.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferredplayer.fila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.chrisstewart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailer.charlottesweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.jae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.koresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.sforcedemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.apricot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.salsify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.socialsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdwaccess.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsupport.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriskportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clipperstartcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cochezycia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitytrustcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csiselementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dornierdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icpemployeecommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icpmasterworkscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interview.qualifyde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jimukyoku.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnexperiencecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ochsnerdesign.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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