prod.28.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:24:68:47:38:3c:e5:02:4d:19:69:fa:99:b7:16:cd:b5:62 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.28.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:24:68:47:38:3c:e5:02:4d:19:69:fa:99:b7:16:cd:b5:62
Serial Number (int): 360837918441472860899261861091773088904546
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:a8:23:e1:88:9e:3b:31:24:fa:ac:92:82:e5:24:17:ac:16:88:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:d3:fc:53:22:06:49:b5:9b:98:11:ef:c5:d8:ec:5d:96:78:d1:39
Fingerprint (sha256): 3b:1f:d1:85:87:82:fb:06:95:2a:b6:f7:b2:da:ee:6a:55:91:ac:4f:b2:01:6a:66:06:e5:ab:d2:e4:7b:83:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.28.slot.cdn.salesforce-communities.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.28.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admincamp.escortia.net
admisiones.estudiaronline.ucam.edu
admisiones.online.uco.es
app.praxsuite.com
apply.online.ku.ac.ke
care.intelenyx.com
cdn.ap13.blitztesting.com
cdn.ap3.blitztesting.com
cdn.eu35.blitztesting.com
cdn.eu38.blitztesting.com
cdn.na125.blitztesting.com
cdn.na97.blitztesting.com
cms.deetee.com
cms.evolis.com
cms.globalopticsdemo.tk
cms.iba-dosimetry.com
cms.lhdbenefits.com
community.delight.fit
community.good-sellers.com
community.murata.com
eml.onemarketing.jp
erp.isid.co.jp
files.goodsalespromotion.jp
finance.sp-ah.org
gsclub.gardenstory.jp
help.evbox.com
help.nfnl2.work
help.zyfexx.com
helpcenter.trackunit.com
hub.online.ku.ac.ke
hub.online.uj.ac.za
hub.online.up.ac.za
images.redeapp.com
info.paycaptain.com
ir.k-springboard.com
irm.k-springboard.com
kundenportal.daheim-solar.de
kundentest.daheim-solar.de
login.pecoeeportal.com
m.masterclass.com
members.tia.org.nz
nominate.vinsoftware.xyz
pardot.falken.com.au
pardot.internet.asn.au
pardotemail.genomind.com
partner.ebis.ne.jp
partner.evbox.com
partners.axiind.com
partners.upes.ac.in
portal.vevromerike.no
prod.28.slot.cdn.salesforce-communities.com
resources.canva.com
s-em.mylearningonline.com.au
salesforce-cms.aquilliance.de
salesforce.displaywise.com.au
salesforce2.silvern.net
salesforce3.silvern.net
salesforce4.silvern.net
salesforce5.silvern.net
salesforce6.silvern.net
salesforce7.silvern.net
salesforce8.silvern.net
salesforce9.silvern.net
saninet.sanifair.de
sf.acmp.net
site.techceed-ops.com
support.averna.com
support.ebis.ne.jp
support.escortia.net
supporter.ea.greenpeace.org
survey.delight.fit
updates.teammed.com.au
vaxperf.askbutters.com
www.amazon-gcatech.com
www.iwasedatabase.jp
www.k-springboard.com
www.stjosephsoconnor.org.au
www.wellnessfoods.jp
www3.inlite.com.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.28.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9BMfZpH6UDVnzA+ul1n
iNUeXw7QLg832lo4xzZ6h2s+wWPUsKz+5FFaByNi+NpTnhpgbEkHA4qu4UhHm6cC
G8dtm5s/8kxBSkNS5FG2mBqtNuYBHqvo9d9U8XtWDWXXqO/fzUEefvq6aja+ZpC6
b78jRTXwSoMKJ5GOqsUbKb0cRnNSCbXmx1BCux+YuTfCxlDQHIyICI29ZKVmXTel
NZQPKnoNnjXQZX9uDp7Zy6ts3nmt9+Ye12ekO0eMi15u5GLObCHFvMHNFvEE3cLU
Q5FA2MIWDx2mWDHs/Ls0nCuaOj/XZ+MXXnPq8z25lyXcrPYewTPHwdPENQFx4FTw
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360837918441472860899261861091773088904546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-22 08:24:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-20 08:24:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22194419331447192320878151629902336015306070403316776341783109474750882771763758841133403091306362504075647635281581143295094285589513189020430637223486793001173802887292157035262445013210742438560821136694664101300793802867256955898082327363885467986331794677181651720813870633430603064634574006251663633015967846011844581534472268110068466730330094811281977543193748920477006855971323724216646049938845440841564369378468224035676142443501707946034739556549822881748743460007154461376076725458600657971173636336708678642539675506657471249737886506174053055323932815317086358022824669925492969423356912284703495876827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24a823e1889e3b3124faac9282e52417ac1688e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admincamp.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admisiones.estudiaronline.ucam.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admisiones.online.uco.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.praxsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.online.ku.ac.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care.intelenyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap13.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu35.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu38.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na125.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na97.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.deetee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.evolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.globalopticsdemo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.iba-dosimetry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lhdbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.good-sellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.murata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eml.onemarketing.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.isid.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.goodsalespromotion.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance.sp-ah.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsclub.gardenstory.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nfnl2.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.zyfexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.trackunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.ku.ac.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.uj.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.online.up.ac.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.redeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.paycaptain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irm.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundentest.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.pecoeeportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.masterclass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.tia.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.vinsoftware.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.falken.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.internet.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotemail.genomind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.axiind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.upes.ac.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vevromerike.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.canva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-em.mylearningonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce-cms.aquilliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.displaywise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce2.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce3.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce4.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce5.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce6.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce7.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce8.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce9.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saninet.sanifair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.acmp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techceed-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.averna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.ea.greenpeace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.teammed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaxperf.askbutters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon-gcatech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwasedatabase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsoconnor.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfoods.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.inlite.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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