prod.2.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:55:3b:50:a7:fc:fd:82:3c:39:e9:9f:78:6d:fa:2c:0d:f9 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.2.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:3b:50:a7:fc:fd:82:3c:39:e9:9f:78:6d:fa:2c:0d:f9
Serial Number (int): 290339702226266860072645358963231319395833
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:ef:29:d4:7f:2c:1d:24:72:ab:d4:da:1c:b7:96:82:ca:0b:43:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:b8:e1:f3:71:2f:46:b3:eb:b3:7e:78:f2:f0:b5:85:ca:89:ae:d7
Fingerprint (sha256): 3a:eb:79:9d:14:39:81:82:ec:1c:d2:5d:1f:2c:dd:18:99:8d:35:e9:ed:eb:52:43:9a:93:70:0d:5d:26:e9:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.2.slot.cdn.salesforce-communities.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.2.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankauf.ecary.de
apn.rickhansen.com
bfrg.alphanet.org
catalyst-dev.ctlyst.io
cdn.eu32.blitztesting.com
cdn.na122.blitztesting.com
cdn.na64.blitztesting.com
cdn.na91.blitztesting.com
cdn.na93.blitztesting.com
cms.encinacapital.com
cms.sahkolaitos.fi
cms.t-mobile.com
communities.deluxe.com
community.athenasoftware.net
community.calcpa.org
content.macdc.org
content.mail.thron.com
content.maxex.com
crm.ecary.de
customer.bionic.co.uk
customer.lendai.us
customers.litmus.io
customersupport.zscaler.com
esgwarranty.doveresg.com
harmony.purplesense.org
help.clearbanc.com
help.merchant.quadpay.com
help.wework.com
hive.sambanova.ai
members.aaup.org
mon.strigo.ca
my.bethematch.org
my.strigo.ca
myactivities.educationfoundation.org
myamgen.amgen.com
mycommunity.amgen.com
mywharton.wharton.upenn.edu
owners.conairgroup.com
pardot.yorktownfunds.com
pardoteef.encinacapital.com
parents.uci.edu
partner.lendai.us
platform.pointcare.com
portal.healthplm.com
portal.urbanteachers.org
prod.2.slot.cdn.salesforce-communities.com
professional.alphanet.org
radsportsadidas.sfdxp.com
radsportsnike.sfdxp.com
radsportswoodlands.sfdxp.com
reunion.uci.edu
rhfactest.rickhansen.com
sales.grayshift.com
salesforce.netstream.ch
serviceprovider.purplesense.org
sfcdn.cypress.courses
sharedcertdemona61-1.blitztesting.com
sharedcertdemona64-1.blitztesting.com
source.netguru.com
subscriber.alphanet.org
success-test.exponentpartners.com
suppliers.appfolioinc.com
support-research.sambanova.ai
support-retailmedia.criteo.com
support.meltio3d.com
support.sambanova.ai
survey.patientslikeme.com
tammberlin.wine
test.lendai.us
visit.profysio.ee
webservices.telekom-dienste.de
www.bfrg.alphanet.org
www.grandys.fr
www.hdc.hyundai.fr
www.olegforce.com
www.professional.alphanet.org
www.subscriber.alphanet.org
www.vrtxmedical.com
www3.bellevuecollege.edu

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com

Certificate

The complete raw certificate details for prod.2.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMpTCCC42gAwIBAgISA1U7UKf8/YI8OemfeG36LA35MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAyMDkyMTE0NTNaFw0yMjA1MTAyMTE0NTJaMDUxMzAxBgNVBAMT
KnByb2QuMi5zbG90LmNkbi5zYWxlc2ZvcmNlLWNvbW11bml0aWVzLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMUsiQLfIDh4Ao/Ik2LA1onUCa8C
xGDWBVDOHXscKxYXgOkqSL0/m30zD+BIfEdSkFAoHD+vJ6pKRUSDnoA6mkdbrRbY
Eq+8jvZcLwxRfGRKYQLY2CagIIY3txwx4WLuwpkRbQ4ZaobOJ7t+FdxKNyst2B1o
cguv2i00CDUMsetbq1xBb/2uVGY+0JU8mo1sMeMycqBtik5uWjkQETT2eN7Zc9DN
gP92plJ5MEMqOGt0wwNt3x3hXHJUfiN0w8oajhQOUD7bXbYNpo21Xn/IBElCiqWH
+23eB7VaFTmNo7q0CtXWauK73ZzN4z7iQAlraopQEKBYmCwiyXADe++qJHcCAwEA
AaOCCbAwggmsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+u8p1H8sHSRyq9TaHLeW
gsoLQ1IwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggd9BgNVHREEggd0MIIHcIIP
YW5rYXVmLmVjYXJ5LmRlghJhcG4ucmlja2hhbnNlbi5jb22CEWJmcmcuYWxwaGFu
ZXQub3JnghZjYXRhbHlzdC1kZXYuY3RseXN0LmlvghljZG4uZXUzMi5ibGl0enRl
c3RpbmcuY29tghpjZG4ubmExMjIuYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLm5hNjQu
YmxpdHp0ZXN0aW5nLmNvbYIZY2RuLm5hOTEuYmxpdHp0ZXN0aW5nLmNvbYIZY2Ru
Lm5hOTMuYmxpdHp0ZXN0aW5nLmNvbYIVY21zLmVuY2luYWNhcGl0YWwuY29tghJj
bXMuc2Foa29sYWl0b3MuZmmCEGNtcy50LW1vYmlsZS5jb22CFmNvbW11bml0aWVz
LmRlbHV4ZS5jb22CHGNvbW11bml0eS5hdGhlbmFzb2Z0d2FyZS5uZXSCFGNvbW11
bml0eS5jYWxjcGEub3JnghFjb250ZW50Lm1hY2RjLm9yZ4IWY29udGVudC5tYWls
LnRocm9uLmNvbYIRY29udGVudC5tYXhleC5jb22CDGNybS5lY2FyeS5kZYIVY3Vz
dG9tZXIuYmlvbmljLmNvLnVrghJjdXN0b21lci5sZW5kYWkudXOCE2N1c3RvbWVy
cy5saXRtdXMuaW+CG2N1c3RvbWVyc3VwcG9ydC56c2NhbGVyLmNvbYIYZXNnd2Fy
cmFudHkuZG92ZXJlc2cuY29tghdoYXJtb255LnB1cnBsZXNlbnNlLm9yZ4ISaGVs
cC5jbGVhcmJhbmMuY29tghloZWxwLm1lcmNoYW50LnF1YWRwYXkuY29tgg9oZWxw
Lndld29yay5jb22CEWhpdmUuc2FtYmFub3ZhLmFpghBtZW1iZXJzLmFhdXAub3Jn
gg1tb24uc3RyaWdvLmNhghFteS5iZXRoZW1hdGNoLm9yZ4IMbXkuc3RyaWdvLmNh
giRteWFjdGl2aXRpZXMuZWR1Y2F0aW9uZm91bmRhdGlvbi5vcmeCEW15YW1nZW4u
YW1nZW4uY29tghVteWNvbW11bml0eS5hbWdlbi5jb22CG215d2hhcnRvbi53aGFy
dG9uLnVwZW5uLmVkdYIWb3duZXJzLmNvbmFpcmdyb3VwLmNvbYIYcGFyZG90Lnlv
cmt0b3duZnVuZHMuY29tghtwYXJkb3RlZWYuZW5jaW5hY2FwaXRhbC5jb22CD3Bh
cmVudHMudWNpLmVkdYIRcGFydG5lci5sZW5kYWkudXOCFnBsYXRmb3JtLnBvaW50
Y2FyZS5jb22CFHBvcnRhbC5oZWFsdGhwbG0uY29tghhwb3J0YWwudXJiYW50ZWFj
aGVycy5vcmeCKnByb2QuMi5zbG90LmNkbi5zYWxlc2ZvcmNlLWNvbW11bml0aWVz
LmNvbYIZcHJvZmVzc2lvbmFsLmFscGhhbmV0Lm9yZ4IZcmFkc3BvcnRzYWRpZGFz
LnNmZHhwLmNvbYIXcmFkc3BvcnRzbmlrZS5zZmR4cC5jb22CHHJhZHNwb3J0c3dv
b2RsYW5kcy5zZmR4cC5jb22CD3JldW5pb24udWNpLmVkdYIYcmhmYWN0ZXN0LnJp
Y2toYW5zZW4uY29tghNzYWxlcy5ncmF5c2hpZnQuY29tghdzYWxlc2ZvcmNlLm5l
dHN0cmVhbS5jaIIfc2VydmljZXByb3ZpZGVyLnB1cnBsZXNlbnNlLm9yZ4IVc2Zj
ZG4uY3lwcmVzcy5jb3Vyc2VzgiVzaGFyZWRjZXJ0ZGVtb25hNjEtMS5ibGl0enRl
c3RpbmcuY29tgiVzaGFyZWRjZXJ0ZGVtb25hNjQtMS5ibGl0enRlc3RpbmcuY29t
ghJzb3VyY2UubmV0Z3VydS5jb22CF3N1YnNjcmliZXIuYWxwaGFuZXQub3JngiFz
dWNjZXNzLXRlc3QuZXhwb25lbnRwYXJ0bmVycy5jb22CGXN1cHBsaWVycy5hcHBm
b2xpb2luYy5jb22CHXN1cHBvcnQtcmVzZWFyY2guc2FtYmFub3ZhLmFpgh5zdXBw
b3J0LXJldGFpbG1lZGlhLmNyaXRlby5jb22CFHN1cHBvcnQubWVsdGlvM2QuY29t
ghRzdXBwb3J0LnNhbWJhbm92YS5haYIZc3VydmV5LnBhdGllbnRzbGlrZW1lLmNv
bYIPdGFtbWJlcmxpbi53aW5lgg50ZXN0LmxlbmRhaS51c4IRdmlzaXQucHJvZnlz
aW8uZWWCHndlYnNlcnZpY2VzLnRlbGVrb20tZGllbnN0ZS5kZYIVd3d3LmJmcmcu
YWxwaGFuZXQub3Jngg53d3cuZ3JhbmR5cy5mcoISd3d3LmhkYy5oeXVuZGFpLmZy
ghF3d3cub2xlZ2ZvcmNlLmNvbYIdd3d3LnByb2Zlc3Npb25hbC5hbHBoYW5ldC5v
cmeCG3d3dy5zdWJzY3JpYmVyLmFscGhhbmV0Lm9yZ4ITd3d3LnZydHhtZWRpY2Fs
LmNvbYIYd3d3My5iZWxsZXZ1ZWNvbGxlZ2UuZWR1MEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAQcjKsd8iRkoQ
xqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF+4I3BPQAABAMASDBGAiEApLWkyQF4
3JUmMIjNydhkpHDtId9zdbBzzhEgcNtB5KACIQC8MSyHdZt3ZI/Ybqrc0XNIVJXl
LTA/9SN2bIK36MqO2wB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceE
AAABfuCNwT4AAAQDAEcwRQIhAMy1bMsuq9u6OVTMPpTb5zmtxVxxBlCnwtpVZ/ed
3xcuAiArE25LIt1OvN6iu2hZLyOr7YSVyc7kcySZmVTk6BrFGDANBgkqhkiG9w0B
AQsFAAOCAQEARzCBjVDW5+k3pifJ69Wr1EcelUOIsc91mk4o5rToQNNpUF236l+p
qhMbezXz7OA1AgvDwOikrX6/cboEb9nhaVKJAegR7RAOnE1yY8nmhov4imp7CYlK
melnoyDCXA1jmJDuE1TX6nWg3KYee+AwG6RGzb0yOlXEqtOSzHuNFFK1TMR0G7mC
CpevaZj99LinHRCDokNyhLdQB5fey1Rxdj3FsNNPtQMc7wy/NPQZ09Gv6u2aBhcv
G44Zf1+87ONViju/J2fI7C0mfWdlKebhhN7+Eor7lIH8aX4vJ5lccd4t7wwsdbkX
swTmQ8FGXqO9NH8eep3bNl9EiQhx/RgPvw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSyJAt8gOHgCj8iTYsDW
idQJrwLEYNYFUM4dexwrFheA6SpIvT+bfTMP4Eh8R1KQUCgcP68nqkpFRIOegDqa
R1utFtgSr7yO9lwvDFF8ZEphAtjYJqAghje3HDHhYu7CmRFtDhlqhs4nu34V3Eo3
Ky3YHWhyC6/aLTQINQyx61urXEFv/a5UZj7QlTyajWwx4zJyoG2KTm5aORARNPZ4
3tlz0M2A/3amUnkwQyo4a3TDA23fHeFcclR+I3TDyhqOFA5QPttdtg2mjbVef8gE
SUKKpYf7bd4HtVoVOY2jurQK1dZq4rvdnM3jPuJACWtqilAQoFiYLCLJcAN776ok
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290339702226266860072645358963231319395833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 21:14:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-10 21:14:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24890907203968907013650649454936134289641599079603142353761410143111491732949517702303980953842968326180355599516878972235951768424169769419646356725648175451795428787051518896192518587525919662600398275304754664431240057992573513983963203798277047523770605802289749779518244455215306021357544739555613948745190233550450089151868483315979228914583075231348155423038136446620466812370886362480863523213819105225931648277549963248035546394061133641402378600361163638831790737737509461241447166904010684262133482246686873977034057714942044801005853599049685719997558225634938503678463447220502750787284921787191986365559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faef29d47f2c1d2472abd4da1cb79682ca0b4352
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankauf.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apn.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalyst-dev.ctlyst.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu32.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na122.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na64.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na91.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na93.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sahkolaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.t-mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communities.deluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.athenasoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.calcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.macdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mail.thron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.maxex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.bionic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.litmus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.zscaler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgwarranty.doveresg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clearbanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.merchant.quadpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.aaup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bethematch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myactivities.educationfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myamgen.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycommunity.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywharton.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owners.conairgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.yorktownfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardoteef.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parents.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.pointcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.healthplm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.urbanteachers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsportsadidas.sfdxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsportsnike.sfdxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsportswoodlands.sfdxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhfactest.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.grayshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.netstream.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceprovider.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdn.cypress.courses'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedcertdemona61-1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedcertdemona64-1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.netguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success-test.exponentpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppliers.appfolioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-research.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-retailmedia.criteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.meltio3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.patientslikeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammberlin.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.profysio.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.telekom-dienste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandys.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdc.hyundai.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olegforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrtxmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.bellevuecollege.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ee08dc13d0000040300483046022100a4b5a4c90178dc95263088cdc9d864a470ed21df7375b073ce112070db41e4a0022100bc312c87759b77648fd86eaadcd173485495e52d303ff523766c82b7e8ca8edb0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ee08dc13e0000040300473045022100ccb56ccb2eabdbba3954cc3e94dbe739adc55c710650a7c2da5567f79ddf172e02202b136e4b22dd4ebcdea2bb68592f23abed8495c9cee47324999954e4e81ac518
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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