prod.34.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:71:0d:b5:bc:99:d1:f9:8e:87:d5:4c:10:12:4e:1b:ba:6b was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.34.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:0d:b5:bc:99:d1:f9:8e:87:d5:4c:10:12:4e:1b:ba:6b
Serial Number (int): 386919274784063530081865391372202661362283
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0e:46:9b:80:66:d3:53:23:4e:e2:55:25:55:ce:05:c5:7a:7c:83:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:e9:45:21:53:d8:23:a7:f9:8f:66:dd:90:a2:1c:b0:59:2d:f0:c8
Fingerprint (sha256): 38:5e:d0:91:65:f7:d9:85:15:da:01:29:8e:3d:b9:53:3e:e4:76:7e:6a:e2:cb:7f:e1:9f:19:4c:9b:1d:dd:31

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.34.slot.cdn.salesforce-communities.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.34.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3rdparties.imcdgroup.com
admissoes.online.uva.br
admissoes.posonline.unijorge.edu.br
brandportal.sephora.com
bright.tryelevate.com
clientsupport.operto.com
cms.elevat-iot.com
cms.isupark.org
cms.iyi.org
cms.marybaldwin.edu
cms.new-nyc.org
content.aicompanies.com
content.local.fr
customer.idnow.io
dms.dealermatix.com
emerge.tryelevate.com
health-verify.salesforce.com
help.appfolioim.com
help.clear.co
help.legendaryhcp.com
iht.mkt.cms.inventec.dehon.com
images.ebe-inc.com
images.heliosenergyus.com
images.iheartgr.org
join.damejidlo.cz
join.foodpanda.de
legalnotices.idnow.io
login.swissgrid.ch
my.bmw.com
my.mini.com
myamgen-spt.amgen.com
myamgentest1.amgen.com
pardot.regionalinternational.com
partner.foodora.fi
partner.foodora.no
partner.foodora.se
partner.idnow.io
prod.34.slot.cdn.salesforce-communities.com
restaurant.foodpanda.com.tw
sales.blendrealty.com
salesforce.advance-trading.com
sf.fabricrisk.com
sf.xeric.net
sfcdn.fabricrisk.com
sfcms.midlandindustries.com
support.agentmarketing.com
support.globalcitizen.org
support.idnow.io
support.tryelevate.com
support.uhin.org
support.vesselvanguard.com
user.idnow.io
vendor.legendaryhcp.com
web.legendaryhcp.com
www.approviders.org
www.chasingfrancisdoc.com
www.comm.aliciateo.xyz
www.connect-iwforum.org
www.empowerme.me
www.epbfihub.com
www.go.aliciateo.xyz
www.join.damejidlo.cz
www.join.foodpanda.de
www.restaurant.foodpanda.com.tw

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.34.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCAZGo3Wc+4lq+jGNxPf
CveR+PmAqONw9O0eKpwoPKwic/WKdcX1apjNJq3rKyWU/jqALQOTgLDuYOkdN6GH
ZJ84Cb5rKX6+3PMEJX66/SNwN7B5mwsXppgfJX1Rpk2WmfTRsMw1o5UfrWp/dZaJ
obDkMhr4tIe9AI5DRum5VT1s9iGPh0YyU30mU93Iu1WQy6DAYAxi9xD9YXXtOdCu
/hjqpltqDWLO9S1+6aJQIsK26xqVfg01DyOW8akv8twuMUti4VViXlibRBi/oOa3
xC83R4KiIW6FPtNaOBWb4dY2EpuP5CgzvGe/Xkn0A0pNq1hTS5XlcLLwGvudC5kL
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386919274784063530081865391372202661362283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 22:05:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-05 22:05:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.34.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24253582697498726905407802893070132966783425399851924916852268786455608924640603162507515594499981721968421658164196769425791893299712767613503725697789204332862044303206177540131472816104546594694196368827754326561261358257341462537498696883443823799163873054634211351862099056632472229825701364545113578721735816719813867299172430529011616754129822490284407980045826344899958626030363355124862503626921709040715286240249778614824057157874399259302777460603458951913576191083380873368679307516538177537866022416003194785355102644676988386545915265879671322554005916479775876662280259596341650058747567208466520542137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e469b8066d353234ee2552555ce05c57a7c83fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3rdparties.imcdgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissoes.online.uva.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissoes.posonline.unijorge.edu.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandportal.sephora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bright.tryelevate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientsupport.operto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.elevat-iot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.isupark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.iyi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.marybaldwin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.new-nyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aicompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.local.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.idnow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dms.dealermatix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerge.tryelevate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-verify.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.appfolioim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.legendaryhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iht.mkt.cms.inventec.dehon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.ebe-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.heliosenergyus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iheartgr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.damejidlo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.foodpanda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalnotices.idnow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.swissgrid.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myamgen-spt.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myamgentest1.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.regionalinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.foodora.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.foodora.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.foodora.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.idnow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.34.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.blendrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.advance-trading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.fabricrisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.xeric.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdn.fabricrisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.midlandindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.agentmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.globalcitizen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.idnow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tryelevate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.uhin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.vesselvanguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user.idnow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor.legendaryhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.legendaryhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.approviders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chasingfrancisdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm.aliciateo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect-iwforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empowerme.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epbfihub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.go.aliciateo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.damejidlo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.foodpanda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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