prod.29.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:67:26:4e:42:7c:9d:20:8d:9c:f4:42:55:09:58:b2:65:a9 was issued on by Let's Encrypt.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.29.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:26:4e:42:7c:9d:20:8d:9c:f4:42:55:09:58:b2:65:a9
Serial Number (int): 383549144531404395336644724192559536170409
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:22:65:30:47:34:ce:27:38:51:5d:c0:1f:e9:01:72:ed:d9:7d:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): be:2d:ec:51:42:f4:e4:86:97:8b:32:d2:8e:1e:33:8d:b2:39:0e:6c
Fingerprint (sha256): 34:cc:68:a6:e1:75:56:d8:00:e5:d2:dd:10:9c:8f:f0:19:d8:d4:e1:a6:50:9e:6c:cb:bf:a9:0e:4a:36:f3:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.29.slot.cdn.salesforce-communities.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.29.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply.aua.am
birdseyecoupon.readyseteat.com
cdn.eu28.blitztesting.com
cdn.eu43.blitztesting.com
cdn.na131.blitztesting.com
cdn.um3.blitztesting.com
cms.acrotec.ch
coder.episource.com
coding.episource.com
community.qaa.ac.uk
contactus.conagrabrands.com
content.cheshireimpact.com
customercontactus.conagrabrands.com
customerportal.interlacehealth.com
distribution.st.com
duncanhines.conagrabrands.com
faq.bmw.ch
faq.bmw.co.za
faq.bmw.es
faq.bmw.pt
faq.mini.ch
faq.mini.co.za
faq.mini.es
faq.mini.nl
faq.mini.pt
gardeinchickn.readyseteat.com
greenwire.greenpeace.org.uk
healthychoicecoupon.readyseteat.com
helpcenter.conagrabrands.com
mariecallenders.conagrabrands.com
mk.kz.marykayintouch.com
mk.marykayintouch.ua
my.diehardassurance.com
my.geoslam.com
p.trustpayments.com
pardot.darren-evans.co.uk
pardot.rithom.com
partners.adyen.com
partners.n2media.com
prod.29.slot.cdn.salesforce-communities.com
restaurant.foodpanda.co.jp
restaurant.foodpanda.co.th
restaurant.foodpanda.com.bd
restaurant.foodpanda.com.kh
restaurant.foodpanda.com.mm
restaurant.foodpanda.hk
restaurant.foodpanda.la
restaurant.foodpanda.my
restaurant.foodpanda.ph
restaurant.foodpanda.pk
restaurant.foodpanda.sg
rlesa.repsol.com
salesforcecms.adstream.com
sfc.terry.uga.edu
sponsor.continuvue.com
suite.cm.tourlane.com
support.exact.com
support.lavu.com
support.n2media.com
support.zspace.com
uploads.episource.com
us.support.gohenry.com
www.diehardassurance.com
www.mycqstore.com
www.myindstore.com
www.restaurant.foodpanda.co.jp
www.restaurant.foodpanda.co.th
www.restaurant.foodpanda.com.bd
www.restaurant.foodpanda.com.kh
www.restaurant.foodpanda.com.mm
www.restaurant.foodpanda.hk
www.restaurant.foodpanda.la
www.restaurant.foodpanda.my
www.restaurant.foodpanda.ph
www.restaurant.foodpanda.pk
www.restaurant.foodpanda.sg

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.29.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILkjCCCnqgAwIBAgISBGcmTkJ8nSCNnPRCVQlYsmWpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTExMjUwOTMzNDhaFw0yMjAyMjMwOTMzNDdaMDYxNDAyBgNVBAMT
K3Byb2QuMjkuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdQ0+nLKerPVbDlQa0V6xw8ZI
kWmVJlMMpJajoGa1AXqJvxwdVxAnjDWpnSENV1TP7ADsmFQHBQGQ7Y8ZB+TfH662
eAN6TZTbhi+FsZx0Dsv7fvz9oZGb2melGw1fFh4IFnQtp0+N6jR7NBS7SIR3+cRm
JH4d01In+jyfRCxK76LXI+mHgEDojzUO8zUCnQYsFjcXwT0KVieRQKIPMmkiuY15
IG7zpLQqgNF2Kq1u6PwE/kYDXPDomy3bLgZ3obVTRk3CUZsKaKCmOqbkBC6cDmpd
PBlryax/7ve9g0peu/xxls4z36HBPOMjcBjYOVy2pxGl5uUF1i9BUPEVSVeFAgMB
AAGjggicMIIImDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPciZTBHNM4nOFFdwB/p
AXLt2X1rMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHXQYDVR0RBIIHVDCCB1CC
DGFwcGx5LmF1YS5hbYIeYmlyZHNleWVjb3Vwb24ucmVhZHlzZXRlYXQuY29tghlj
ZG4uZXUyOC5ibGl0enRlc3RpbmcuY29tghljZG4uZXU0My5ibGl0enRlc3Rpbmcu
Y29tghpjZG4ubmExMzEuYmxpdHp0ZXN0aW5nLmNvbYIYY2RuLnVtMy5ibGl0enRl
c3RpbmcuY29tgg5jbXMuYWNyb3RlYy5jaIITY29kZXIuZXBpc291cmNlLmNvbYIU
Y29kaW5nLmVwaXNvdXJjZS5jb22CE2NvbW11bml0eS5xYWEuYWMudWuCG2NvbnRh
Y3R1cy5jb25hZ3JhYnJhbmRzLmNvbYIaY29udGVudC5jaGVzaGlyZWltcGFjdC5j
b22CI2N1c3RvbWVyY29udGFjdHVzLmNvbmFncmFicmFuZHMuY29tgiJjdXN0b21l
cnBvcnRhbC5pbnRlcmxhY2VoZWFsdGguY29tghNkaXN0cmlidXRpb24uc3QuY29t
gh1kdW5jYW5oaW5lcy5jb25hZ3JhYnJhbmRzLmNvbYIKZmFxLmJtdy5jaIINZmFx
LmJtdy5jby56YYIKZmFxLmJtdy5lc4IKZmFxLmJtdy5wdIILZmFxLm1pbmkuY2iC
DmZhcS5taW5pLmNvLnphggtmYXEubWluaS5lc4ILZmFxLm1pbmkubmyCC2ZhcS5t
aW5pLnB0gh1nYXJkZWluY2hpY2tuLnJlYWR5c2V0ZWF0LmNvbYIbZ3JlZW53aXJl
LmdyZWVucGVhY2Uub3JnLnVrgiNoZWFsdGh5Y2hvaWNlY291cG9uLnJlYWR5c2V0
ZWF0LmNvbYIcaGVscGNlbnRlci5jb25hZ3JhYnJhbmRzLmNvbYIhbWFyaWVjYWxs
ZW5kZXJzLmNvbmFncmFicmFuZHMuY29tghhtay5rei5tYXJ5a2F5aW50b3VjaC5j
b22CFG1rLm1hcnlrYXlpbnRvdWNoLnVhghdteS5kaWVoYXJkYXNzdXJhbmNlLmNv
bYIObXkuZ2Vvc2xhbS5jb22CE3AudHJ1c3RwYXltZW50cy5jb22CGXBhcmRvdC5k
YXJyZW4tZXZhbnMuY28udWuCEXBhcmRvdC5yaXRob20uY29tghJwYXJ0bmVycy5h
ZHllbi5jb22CFHBhcnRuZXJzLm4ybWVkaWEuY29tgitwcm9kLjI5LnNsb3QuY2Ru
LnNhbGVzZm9yY2UtY29tbXVuaXRpZXMuY29tghpyZXN0YXVyYW50LmZvb2RwYW5k
YS5jby5qcIIacmVzdGF1cmFudC5mb29kcGFuZGEuY28udGiCG3Jlc3RhdXJhbnQu
Zm9vZHBhbmRhLmNvbS5iZIIbcmVzdGF1cmFudC5mb29kcGFuZGEuY29tLmtoghty
ZXN0YXVyYW50LmZvb2RwYW5kYS5jb20ubW2CF3Jlc3RhdXJhbnQuZm9vZHBhbmRh
LmhrghdyZXN0YXVyYW50LmZvb2RwYW5kYS5sYYIXcmVzdGF1cmFudC5mb29kcGFu
ZGEubXmCF3Jlc3RhdXJhbnQuZm9vZHBhbmRhLnBoghdyZXN0YXVyYW50LmZvb2Rw
YW5kYS5wa4IXcmVzdGF1cmFudC5mb29kcGFuZGEuc2eCEHJsZXNhLnJlcHNvbC5j
b22CGnNhbGVzZm9yY2VjbXMuYWRzdHJlYW0uY29tghFzZmMudGVycnkudWdhLmVk
dYIWc3BvbnNvci5jb250aW51dnVlLmNvbYIVc3VpdGUuY20udG91cmxhbmUuY29t
ghFzdXBwb3J0LmV4YWN0LmNvbYIQc3VwcG9ydC5sYXZ1LmNvbYITc3VwcG9ydC5u
Mm1lZGlhLmNvbYISc3VwcG9ydC56c3BhY2UuY29tghV1cGxvYWRzLmVwaXNvdXJj
ZS5jb22CFnVzLnN1cHBvcnQuZ29oZW5yeS5jb22CGHd3dy5kaWVoYXJkYXNzdXJh
bmNlLmNvbYIRd3d3Lm15Y3FzdG9yZS5jb22CEnd3dy5teWluZHN0b3JlLmNvbYIe
d3d3LnJlc3RhdXJhbnQuZm9vZHBhbmRhLmNvLmpwgh53d3cucmVzdGF1cmFudC5m
b29kcGFuZGEuY28udGiCH3d3dy5yZXN0YXVyYW50LmZvb2RwYW5kYS5jb20uYmSC
H3d3dy5yZXN0YXVyYW50LmZvb2RwYW5kYS5jb20ua2iCH3d3dy5yZXN0YXVyYW50
LmZvb2RwYW5kYS5jb20ubW2CG3d3dy5yZXN0YXVyYW50LmZvb2RwYW5kYS5oa4Ib
d3d3LnJlc3RhdXJhbnQuZm9vZHBhbmRhLmxhght3d3cucmVzdGF1cmFudC5mb29k
cGFuZGEubXmCG3d3dy5yZXN0YXVyYW50LmZvb2RwYW5kYS5waIIbd3d3LnJlc3Rh
dXJhbnQuZm9vZHBhbmRhLnBrght3d3cucmVzdGF1cmFudC5mb29kcGFuZGEuc2cw
TAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQC
BQAwDQYJKoZIhvcNAQELBQADggEBAHsvzwEiMkw1erH6yIGm+EOyR0DI6/fXH1Al
OEr2fECihioLF2cn85MQNRENotf27d3EcwSajXKsGwe6LWVpmQNHrOkIM7QCHoTH
3Sy4bMtZziiKFsOdeCkXY92Bgs0DfkOwYOr91M9Dq7syP6DSqsEYZP2mpAc/UYx3
UaphzyzaxQ/WQ+3KNfcAJo/D/5GE9AAcFawYyyid1WWbGt3fa00I2exQklvH6xxD
DKrcxyt9/MVHcM7MbLmBEApngAs3Yl7NfqB8RtwQmZKPy5wSCt7iuhlLeQF1KXkX
UhyWTtTVg3+b2zygwOwNUnWeUn51YzdNbjCLYsBcWNZjAsgLkdw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3UNPpyynqz1Ww5UGtFe
scPGSJFplSZTDKSWo6BmtQF6ib8cHVcQJ4w1qZ0hDVdUz+wA7JhUBwUBkO2PGQfk
3x+utngDek2U24YvhbGcdA7L+378/aGRm9pnpRsNXxYeCBZ0LadPjeo0ezQUu0iE
d/nEZiR+HdNSJ/o8n0QsSu+i1yPph4BA6I81DvM1Ap0GLBY3F8E9ClYnkUCiDzJp
IrmNeSBu86S0KoDRdiqtbuj8BP5GA1zw6Jst2y4Gd6G1U0ZNwlGbCmigpjqm5AQu
nA5qXTwZa8msf+73vYNKXrv8cZbOM9+hwTzjI3AY2DlctqcRpeblBdYvQVDxFUlX
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383549144531404395336644724192559536170409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-25 09:33:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-23 09:33:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26189049490576146646804423243944572381956167718569911383439374898359399864906644942087802930574118977168514892837200251208016981669474223347726662466093280578102906464834283027647439707840465681021241009662278361529486638786652448051473144972767730606635359869112868523019910192451011138036671253203852799384584640738335268106849215580842631144423870659113472864103351262016284303153540902955416464309395117022256819866758306327336378681522151336801448542682282194167894295841357434740756153801710658874020565806974926874128834240133134433023580411210471151063411147186074809950271421201427116352084797140818597599109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f72265304734ce2738515dc01fe90172edd97d6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.aua.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdseyecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu43.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na131.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acrotec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coder.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.qaa.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cheshireimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercontactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.interlacehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanhines.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardeinchickn.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwire.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthychoicecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariecallenders.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.kz.marykayintouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.geoslam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.trustpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.darren-evans.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.rithom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.adyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesa.repsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.adstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.terry.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.continuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.cm.tourlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lavu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.support.gohenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycqstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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