prod.14.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:78:4a:04:65:6d:98:61:cf:8d:2b:8a:4e:51:4d:07:e9 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.14.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:78:4a:04:65:6d:98:61:cf:8d:2b:8a:4e:51:4d:07:e9
Serial Number (int): 402033367012255647745479064547608547362793
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:91:21:fa:00:56:6a:78:88:a4:2d:11:58:ab:66:c9:05:ee:f6:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:ed:22:5f:ac:fb:6f:f2:55:d5:09:3d:7b:41:90:d4:bd:fe:ed:69
Fingerprint (sha256): 31:35:9b:a0:3a:d2:92:32:51:80:58:c0:c1:e0:e5:88:c2:2d:8a:3b:0d:28:97:19:5d:22:85:cd:b0:be:40:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.14.slot.cdn.salesforce-communities.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.14.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acbcagora.catholic.org.au
access.winshuttle.com
app.welcomemat.com
b2bmanagement.mymolsoncoors.com
bdgmail.bdg.io
booking.rituals.com
cdn.ap6.blitztesting.com
cdn.eu33.blitztesting.com
cdn.eu40.blitztesting.com
cdn.na129.blitztesting.com
cdn.na148.blitztesting.com
cdn.na92.blitztesting.com
cdn.um7.blitztesting.com
chat.guitarcenter.com
chat.musiciansfriend.com
cms.talisbio.com
comms-images.graphika.com
communaute.eloi.eu
community.blackthorn.io
community.integration.pmideep.com
community1.tranzevo.co.in
content.bresimar.pt
content.fionta.com
content.nebulaconsulting.co.uk
content.tana.fi
content.traxall.fr
customerportal.donan.com
donanconnect.donan.com
e.standardtextile.com
enterprise9.corrigo.com
help.tongal.com
help.worldbuilder.tongal.com
helpcenter.womply.com
hub.sustainablesalons.org
images.airliquide.info
images.avicado.com
images.hughes.com
learn.beckinstitute.org
m.habitatadu.com
m.roundtablewealth.com
marketing.pegasosfinance.ch
pardot.ara-inc.com
pardot.gritdigitalhealth.com
partners.varicent.com
prod.14.slot.cdn.salesforce-communities.com
sales.legalplace.fr
salesforce.cms.flooid.com
salesforce.daman.com
salesforce.examensmbo.nl
salesforce.oaklandedfund.org
salesforce.submer.com
salesforce.sunds-computer.de
sf.essilor.com.br
sf.oakhurstmetals.com
store.nilfisk.com
success.visitops.com
support.corrigo.com
support.personifyinc.com
synapsys.modmed.com
teamcenter.adrln.com
vaccine3.hse.ie
volunteers.lgfb.org.au
www.adoramabusiness.com
www.cms.ceili.fi
www.dmgdealer.com
www.integratedagsolutions.com
www.legendaryhcp.com
www.ovationmedportal.com
www1.ninjaselling.com
www2.angus-systems.com
www3.lejournaldugrandparis.fr
www3.ma-douche.fr

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.14.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmueWFyBLgTq70JU/NKbP
AdAVqwy/97h8crBQ7NwpOLyPHjCk9krOPV7cR3394Vj976JItgo0H1XstkyNAxAF
OrJZZjNMGoIUCqZfmHTRXJQRhVNcZC4iS7Ys7dntVY7BCIRLIZ82jjHndU2rdOUb
XNgzLGW5XexZNn0oBK15F0o7kdhYapwRp4q32oU8DUknryTx4lImEu825m5PIP5f
EytN+cKPSs6xmZSsUWb6eT/R5SZxGyWXTEcbnaOruPIw0bL0c8r+wFbHw7CIsrI5
w+l57/Kqv3f7Tx8AQmyai4zOJWyEbVTsbNiWaTRf2QjDvEfZIgGIbQtME95vUdm5
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402033367012255647745479064547608547362793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-10 07:15:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-08 07:15:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.14.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19554898420829979552822363881730191619748076157850657235168517178456027422860582483818232818969616297727633281796125041107481867320773763481151114121098412138805396957487508894516770277986333002289665275541081496104461468128021517157221569950558972981400252319047302085402367481863072889738036516297697376545501317450972740859257536512248925087914841295739136205250903041206577447557088698428037862162140796339042011968928229873129340953212170641468158622193532796444870452203740369504317919746739865678128478950025251073773002231270360717643283606936363438233007452587297747558094725910962601148916587233317913999699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							279121fa00566a7888a42d1158ab66c905eef692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1747 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acbcagora.catholic.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.winshuttle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.welcomemat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bmanagement.mymolsoncoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdgmail.bdg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap6.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu33.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu40.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na129.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na148.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na92.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um7.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.guitarcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.musiciansfriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.talisbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comms-images.graphika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communaute.eloi.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.blackthorn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.integration.pmideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community1.tranzevo.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bresimar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.fionta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.nebulaconsulting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.tana.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.traxall.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.donan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donanconnect.donan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.standardtextile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprise9.corrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.tongal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.worldbuilder.tongal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.womply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.sustainablesalons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.airliquide.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.avicado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.hughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.beckinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.habitatadu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.roundtablewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.pegasosfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.ara-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.gritdigitalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.varicent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.14.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.legalplace.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.cms.flooid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.daman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.examensmbo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oaklandedfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.submer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.sunds-computer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.essilor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.oakhurstmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nilfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success.visitops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.corrigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.personifyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synapsys.modmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamcenter.adrln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccine3.hse.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteers.lgfb.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoramabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.ceili.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmgdealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integratedagsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legendaryhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovationmedportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.ninjaselling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.angus-systems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.lejournaldugrandparis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.ma-douche.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183c0f64d660000040300473045022063317b3682cc66a60161f0f341fe9c774b5bd11945383a4a2fae4f350cde6b5b022100a69bb689936ef59fd893e4802e130d4546e23f4e36666516a0f420069986bf23007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183c0f64f3d00000403004730450220096068b013508c462dcc66c679d2542a08a576cd719ef6e47ebdf60bea70c483022100f31b318bd34d16bbb2363dd298233a253d6061e12fa9b7f2509db6a0306a991d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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