prod.13.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:69:79:23:b4:46:12:ec:3b:ba:48:03:08:d1:e7:a1:00:d7 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.13.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:79:23:b4:46:12:ec:3b:ba:48:03:08:d1:e7:a1:00:d7
Serial Number (int): 297227528296244858495139690603287010148567
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:a3:1d:db:ec:3e:7a:df:34:73:ed:c1:c9:4c:18:5b:98:e4:79:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:b2:0a:9c:f3:b6:6f:02:11:bd:1b:c8:9f:fd:14:d9:45:7b:9f:5f
Fingerprint (sha256): 3c:29:4c:81:22:2e:03:2e:c2:eb:f8:a2:7d:89:d0:06:9c:6e:62:57:54:02:67:80:44:77:91:44:00:aa:a4:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.13.slot.cdn.salesforce-communities.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.13.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apmumbaiselfs.blitztesting.com
ar.verallia.com
assets.run.aeb.com
b2b.fruit.com
b2breturns.gopro.com
bioadvancemember.ca
capitalizacaoonline.icatuseguros.com.br
cdn.ap12.blitztesting.com
cdn.ap22.blitztesting.com
cdn.ap26.blitztesting.com
cdn.ap28.blitztesting.com
cdn.eu36.blitztesting.com
cdn.ind1.blitztesting.com
cdn.na104.blitztesting.com
cdn.na109.blitztesting.com
cdn.na121.blitztesting.com
cdn.na149.blitztesting.com
cdn.na151.blitztesting.com
cdn.na155.blitztesting.com
cdn.na202.blitztesting.com
cdn.usa1.blitztesting.com
cms.alukoenigstahl.com
cms.arno.de
cms.rajapack.be
community.disguise.one
community.mdmep.org
community.tcpsoftware.com
consumercare.coscokids.com
content.aligroup.com.au
content.ingroupe.community
customer.progressa.com
customer.resmed.jp
customers.spryker.com
engage.flexpricer.com
es.verallia.com
falconprod.blitztesting.com
go.zebra-med.com
go2.prodomo.fr
help.avidxchange.com
help.bachhoaviet.com
host.yooralla.com.au
images.iscsrl.com
images.stoneco.com
info.airinnovations.com
info.stjohnvic.com.au
loja.sol-m.com
mail.aiacommunity.com
marketing.diag.bracco.com
mineralsinfo.global.weir
mode.wesgroup.ca
my.centaman.io
my.solidify.com
mycevora.cevora.be
newshop.heidelberg.com
originate.mtg.loan
pardot.eu.vipre.com
pay.healthengine.com.au
pipardot.predictiveindex.com
pom.ywamships.org
prod.13.slot.cdn.salesforce-communities.com
pt.verallia.com
rews.salesforce.com
salesforce.microstrat.com
salesforce.standards.org.au
salesforcecms.recent.kr
sfcms.armentekort.be
sfcontent.sharedhope.org
sfcontent.vbrick.com
sharedg202test1.blitztesting.com
successhub.mtcaustralia.com.au
support.calytera.com
support.mapanything.com
support01.calytera.com
testorgind6falcon.blitztesting.com
ua.verallia.com
university.groople.com
whexceptions.gopro.com
www.aiqsalumni.org
www.fieldservice.act.gov.au
www.notify.worksafe.act.gov.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.13.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WFJlWsSI3xmBrl0RZXk
yyW+ft9jVO3RV103H8p5tRHOUNPUuV59ciXHu1qZorV/HuSBqpDX09cKtmKz7aas
gccr3lPWr/zYdYSHW2BVW0lDNnh7sXpsOFPPAFppPJ6Rhin29irnCYb5Q0zvGbQr
twj3uWFQjCmYP46PwFudnikBD+SxWZPe8CnWgzAnmhx+SGAfaUUvUhIwk5yOinrj
Kb49aXps26ngy1NGPt0HC3klymoX4BMX1iPmnOw3vGpd0DCCdp/tHqjFfrxaCIHf
6t3QZ6tmhwcQgCPJOtfM0E3wdMEc5JRq493Ek2zp4p0SBtMQMJZnRMKbAMQ5pdQa
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297227528296244858495139690603287010148567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-23 18:02:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-22 18:02:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28451592840172984347208531685352921468682138230803612543926524160920653179959802732282620366714497213989923499873512665722808880281294785339682390173815431769497024757923278496892693266145208508768152121521202097378465941493193982188577109363168330075433677904341170618617612701053711388797564110084433457219446853781931618095998645317811455313880911017805683836633724401373975984604140206497938796417834502698675837810809996350202776510190511109652030759057858017378501031992391572506494909056641495791703831801793915900216724630078248317589986666963216134754136212801983388013410416607185294540037109959033521183251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74a31ddbec3e7adf3473edc1c94c185b98e479cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apmumbaiselfs.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.run.aeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.fruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2breturns.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioadvancemember.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalizacaoonline.icatuseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap12.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap22.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap26.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu36.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ind1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na104.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na109.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na121.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na149.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na151.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na155.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na202.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.usa1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.alukoenigstahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.arno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.rajapack.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.disguise.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mdmep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.tcpsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumercare.coscokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aligroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ingroupe.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.progressa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.resmed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.spryker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.flexpricer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconprod.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.zebra-med.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2.prodomo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.avidxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.bachhoaviet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.yooralla.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iscsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stoneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.airinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.stjohnvic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.sol-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aiacommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.diag.bracco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralsinfo.global.weir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mode.wesgroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.centaman.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.solidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycevora.cevora.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newshop.heidelberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originate.mtg.loan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.healthengine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipardot.predictiveindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pom.ywamships.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rews.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.microstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.standards.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.recent.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.armentekort.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.sharedhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.vbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedg202test1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successhub.mtcaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.calytera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mapanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support01.calytera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testorgind6falcon.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.groople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whexceptions.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiqsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldservice.act.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notify.worksafe.act.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017c140a1be30000040300473045022100b0bd702b1f939f482b147d0a958db7ebbdd1433ece9e32de4737a120fab8830102205b0d90504889fa272cef57ad2361c9facf8171642b6d8a04ea817d98da410406007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017c140a1bc500000403004730450220487f086bd324a98de650b497d99c5167e441556905617f523dde76d2b2a7b75c022100dd0feca9b35f056dcf4fdf534ea71e180a3fe24883a313b141ff10e794a810a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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