prod.14.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e3:cf:e2:81:ce:d7:36:fb:72:db:d2:08:14:ee:c4:e4:30 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.14.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e3:cf:e2:81:ce:d7:36:fb:72:db:d2:08:14:ee:c4:e4:30
Serial Number (int): 425969567305129970344959312220416450552880
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:af:53:f0:a1:e6:3c:04:83:9a:f1:94:cb:49:f0:4c:74:0e:3f:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:42:56:2d:91:f9:fb:64:26:12:2c:97:17:42:09:e3:4f:37:bc:ca
Fingerprint (sha256): 37:3d:3d:65:65:38:f3:8f:2f:67:ff:c3:e0:10:23:14:da:55:5d:87:72:12:5a:66:c2:fb:14:71:31:12:5f:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.14.slot.cdn.salesforce-communities.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.14.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acbcagora.catholic.org.au
access.winshuttle.com
app.welcomemat.com
b2bmanagement.mymolsoncoors.com
booking.rituals.com
cdn.ap6.blitztesting.com
cdn.eu33.blitztesting.com
cdn.eu40.blitztesting.com
cdn.na129.blitztesting.com
cdn.na148.blitztesting.com
cdn.na92.blitztesting.com
cdn.um7.blitztesting.com
chat.guitarcenter.com
chat.musiciansfriend.com
cms.talisbio.com
comms-images.graphika.com
communaute.eloi.eu
community.blackthorn.io
community.integration.pmideep.com
community1.tranzevo.co.in
content.bresimar.pt
content.fionta.com
content.nebulaconsulting.co.uk
content.tana.fi
content.traxall.fr
customerportal.donan.com
donanconnect.donan.com
e.standardtextile.com
guidedselling.imcdgroup.com
help.tongal.com
help.worldbuilder.tongal.com
helpcenter.womply.com
hub.sustainablesalons.org
images.airliquide.info
images.avicado.com
images.hughes.com
learn.beckinstitute.org
m.habitatadu.com
m.roundtablewealth.com
marketing.pegasosfinance.ch
pardot.ara-inc.com
pardot.gritdigitalhealth.com
partners.varicent.com
prod.14.slot.cdn.salesforce-communities.com
sales.legalplace.fr
salesforce.cms.flooid.com
salesforce.daman.com
salesforce.examensmbo.nl
salesforce.oaklandedfund.org
salesforce.submer.com
salesforce.sunds-computer.de
sf.essilor.com.br
store.nilfisk.com
success.visitops.com
support.personifyinc.com
synapsys.modmed.com
teamcenter.adrln.com
vaccine3.hse.ie
volunteers.lgfb.org.au
www.adoramabusiness.com
www.cms.ceili.fi
www.integratedagsolutions.com
www.legendaryhcp.com
www.ovationmedportal.com
www3.lejournaldugrandparis.fr

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.14.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILPTCCCiWgAwIBAgISBOPP4oHO1zb7ctvSCBTuxOQwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTUwNzIyNThaFw0yNDA0MTQwNzIyNTdaMDYxNDAyBgNVBAMT
K3Byb2QuMTQuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOWkVj+hmYk6+HfFrUc16kFUZ2
pizKmy3uZnzKiUxq7C8cetYGghP0zVOcw+obuRCo8Zjh49ga6cF2wVuNPOFn12Oc
q6QkZwwZUu0TadMGe1NOAH5K3IuQEZaZyvCVcsTocgGmwV1L8ftIXtojOqF76wOp
aTMT28jSOYk0ypnZJcJ41uhw+6z2zXqmDFGUKLtLV9W8wM3aWO834JprKxv/NqWU
gWcTp8iZWHMyp6jjCIRI8PRwokE4F/FszvI2U8p07sORjgdUhuhuE9CYa2tQIOCe
UJSfdb2u/9k2Rhr+4PT0JbhKKqptthOxz0iXVeJJfpXFSI7yZrpUOgVe7bnvAgMB
AAGjgghHMIIIQzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBuvU/Ch5jwEg5rxlMtJ
8Ex0Dj9kMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGTwYDVR0RBIIGRjCCBkKC
GWFjYmNhZ29yYS5jYXRob2xpYy5vcmcuYXWCFWFjY2Vzcy53aW5zaHV0dGxlLmNv
bYISYXBwLndlbGNvbWVtYXQuY29tgh9iMmJtYW5hZ2VtZW50Lm15bW9sc29uY29v
cnMuY29tghNib29raW5nLnJpdHVhbHMuY29tghhjZG4uYXA2LmJsaXR6dGVzdGlu
Zy5jb22CGWNkbi5ldTMzLmJsaXR6dGVzdGluZy5jb22CGWNkbi5ldTQwLmJsaXR6
dGVzdGluZy5jb22CGmNkbi5uYTEyOS5ibGl0enRlc3RpbmcuY29tghpjZG4ubmEx
NDguYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLm5hOTIuYmxpdHp0ZXN0aW5nLmNvbYIY
Y2RuLnVtNy5ibGl0enRlc3RpbmcuY29tghVjaGF0Lmd1aXRhcmNlbnRlci5jb22C
GGNoYXQubXVzaWNpYW5zZnJpZW5kLmNvbYIQY21zLnRhbGlzYmlvLmNvbYIZY29t
bXMtaW1hZ2VzLmdyYXBoaWthLmNvbYISY29tbXVuYXV0ZS5lbG9pLmV1ghdjb21t
dW5pdHkuYmxhY2t0aG9ybi5pb4IhY29tbXVuaXR5LmludGVncmF0aW9uLnBtaWRl
ZXAuY29tghljb21tdW5pdHkxLnRyYW56ZXZvLmNvLmlughNjb250ZW50LmJyZXNp
bWFyLnB0ghJjb250ZW50LmZpb250YS5jb22CHmNvbnRlbnQubmVidWxhY29uc3Vs
dGluZy5jby51a4IPY29udGVudC50YW5hLmZpghJjb250ZW50LnRyYXhhbGwuZnKC
GGN1c3RvbWVycG9ydGFsLmRvbmFuLmNvbYIWZG9uYW5jb25uZWN0LmRvbmFuLmNv
bYIVZS5zdGFuZGFyZHRleHRpbGUuY29tghtndWlkZWRzZWxsaW5nLmltY2Rncm91
cC5jb22CD2hlbHAudG9uZ2FsLmNvbYIcaGVscC53b3JsZGJ1aWxkZXIudG9uZ2Fs
LmNvbYIVaGVscGNlbnRlci53b21wbHkuY29tghlodWIuc3VzdGFpbmFibGVzYWxv
bnMub3JnghZpbWFnZXMuYWlybGlxdWlkZS5pbmZvghJpbWFnZXMuYXZpY2Fkby5j
b22CEWltYWdlcy5odWdoZXMuY29tghdsZWFybi5iZWNraW5zdGl0dXRlLm9yZ4IQ
bS5oYWJpdGF0YWR1LmNvbYIWbS5yb3VuZHRhYmxld2VhbHRoLmNvbYIbbWFya2V0
aW5nLnBlZ2Fzb3NmaW5hbmNlLmNoghJwYXJkb3QuYXJhLWluYy5jb22CHHBhcmRv
dC5ncml0ZGlnaXRhbGhlYWx0aC5jb22CFXBhcnRuZXJzLnZhcmljZW50LmNvbYIr
cHJvZC4xNC5zbG90LmNkbi5zYWxlc2ZvcmNlLWNvbW11bml0aWVzLmNvbYITc2Fs
ZXMubGVnYWxwbGFjZS5mcoIZc2FsZXNmb3JjZS5jbXMuZmxvb2lkLmNvbYIUc2Fs
ZXNmb3JjZS5kYW1hbi5jb22CGHNhbGVzZm9yY2UuZXhhbWVuc21iby5ubIIcc2Fs
ZXNmb3JjZS5vYWtsYW5kZWRmdW5kLm9yZ4IVc2FsZXNmb3JjZS5zdWJtZXIuY29t
ghxzYWxlc2ZvcmNlLnN1bmRzLWNvbXB1dGVyLmRlghFzZi5lc3NpbG9yLmNvbS5i
coIRc3RvcmUubmlsZmlzay5jb22CFHN1Y2Nlc3MudmlzaXRvcHMuY29tghhzdXBw
b3J0LnBlcnNvbmlmeWluYy5jb22CE3N5bmFwc3lzLm1vZG1lZC5jb22CFHRlYW1j
ZW50ZXIuYWRybG4uY29tgg92YWNjaW5lMy5oc2UuaWWCFnZvbHVudGVlcnMubGdm
Yi5vcmcuYXWCF3d3dy5hZG9yYW1hYnVzaW5lc3MuY29tghB3d3cuY21zLmNlaWxp
LmZpgh13d3cuaW50ZWdyYXRlZGFnc29sdXRpb25zLmNvbYIUd3d3LmxlZ2VuZGFy
eWhjcC5jb22CGHd3dy5vdmF0aW9ubWVkcG9ydGFsLmNvbYIdd3d3My5sZWpvdXJu
YWxkdWdyYW5kcGFyaXMuZnIwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdQBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAY0MN3hgAAAEAwBGMEQCIAGg7u2gMZs1AHAUdxUn6OVaHIkqN1IAp27qPUvL
7OYxAiBWAnf3ZdnbtnQnNqnRsADUrET2kCVef41os7Lhow/eLgB2AHb/iD8KtvuV
UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjQw3eLsAAAQDAEcwRQIgJ/QMEa30
4bhQNElS0abbWVrxkzFfGZT+iCjzF9DqjcECIQDgHG6xkx9LwQ4n085dO2NlwBI3
W8LUf2F9W1SHSFDMpjANBgkqhkiG9w0BAQsFAAOCAQEApEYT+Y3R6t6nif9clwd+
V2xHs2LG7l2gjfl7UMwxmJp9jeg5B1/gtCzhPTxlKoqQqiVRrktNNqpeFeZa2JD6
zk9Mbj71vekhPQjVk593PK0sGmDCX+rAvY3f18uqf7YVL84EDtFAI8512B2RxXsm
wKW9zi/J7mwslVqhQI2PutHyFfVt6Rw7C15vzMQa+dFa8ZTmaS9IdRjq4ay7gPAQ
FbmsERgGQQYfOO72wGaB4nGNRsPavI8ZzJ3pKxJuLVx5HZPJEp76Y+MIMxF3VJGP
5kz+BdjE52m8rhoDn/KK0YGXwYFh8tomOWGAid/lNC2qvEdfCCSdgrqUawRl1ctQ
lA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlpFY/oZmJOvh3xa1HNe
pBVGdqYsypst7mZ8yolMauwvHHrWBoIT9M1TnMPqG7kQqPGY4ePYGunBdsFbjTzh
Z9djnKukJGcMGVLtE2nTBntTTgB+StyLkBGWmcrwlXLE6HIBpsFdS/H7SF7aIzqh
e+sDqWkzE9vI0jmJNMqZ2SXCeNbocPus9s16pgxRlCi7S1fVvMDN2ljvN+Caaysb
/zallIFnE6fImVhzMqeo4wiESPD0cKJBOBfxbM7yNlPKdO7DkY4HVIbobhPQmGtr
UCDgnlCUn3W9rv/ZNkYa/uD09CW4SiqqbbYTsc9Il1XiSX6VxUiO8ma6VDoFXu25
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425969567305129970344959312220416450552880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:22:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 07:22:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.14.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17970353622348501522174817401485104995333627861927358082632223044039757191654154121355155323820886871634745728451052099286835657341556357472097637143820723636049816580950402415819777647496553558259772487997609244217976593797759267397825936424094978292724580144640441846822146056462028036379970214926175671016271572846437077795167761359226215475285340637884053167032571900324398212428146138921925093732144375061634193150959185618033466734200559343647991207713025883346063402332650864991427090543353218803117668359427051112345075118420024190791101315208910390191081556560373276117771840783498941094883187906285482654191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1baf53f0a1e63c04839af194cb49f04c740e3f64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acbcagora.catholic.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.winshuttle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.welcomemat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bmanagement.mymolsoncoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.rituals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap6.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu33.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu40.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na129.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na148.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na92.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.um7.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.guitarcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.musiciansfriend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.talisbio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comms-images.graphika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communaute.eloi.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.blackthorn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.integration.pmideep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community1.tranzevo.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.bresimar.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.fionta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.nebulaconsulting.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.tana.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.traxall.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.donan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donanconnect.donan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.standardtextile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidedselling.imcdgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.tongal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.worldbuilder.tongal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.womply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.sustainablesalons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.airliquide.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.avicado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.hughes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.beckinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.habitatadu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.roundtablewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.pegasosfinance.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.ara-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.gritdigitalhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.varicent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.14.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.legalplace.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.cms.flooid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.daman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.examensmbo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oaklandedfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.submer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.sunds-computer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.essilor.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nilfisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success.visitops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.personifyinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synapsys.modmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamcenter.adrln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaccine3.hse.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volunteers.lgfb.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adoramabusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.ceili.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integratedagsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legendaryhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovationmedportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.lejournaldugrandparis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0c3778600000040300463044022001a0eeeda0319b35007014771527e8e55a1c892a375200a76eea3d4bcbece6310220560277f765d9dbb6742736a9d1b000d4ac44f690255e7f8d68b3b2e1a30fde2e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0c3778bb0000040300473045022027f40c11adf4e1b850344952d1a6db595af193315f1994fe8828f317d0ea8dc1022100e01c6eb1931f4bc10e27d3ce5d3b6365c012375bc2d47f617d5b54874850cca6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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