prod.28.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:af:24:a2:d5:67:db:18:96:c5:42:d1:69:b7:0d:62:c1:d7 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.28.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:af:24:a2:d5:67:db:18:96:c5:42:d1:69:b7:0d:62:c1:d7
Serial Number (int): 408047255626526110566225881457995106402775
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:b1:c1:b0:61:d5:51:a1:21:37:83:08:19:4b:97:1d:51:6f:71:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:59:83:f1:dd:ed:60:50:eb:4c:e8:33:90:25:cd:8d:c5:6e:e3:d0
Fingerprint (sha256): 3c:3c:d3:cf:ed:9b:2a:d8:37:13:33:fa:2f:29:83:ed:8c:7b:f5:4e:4d:60:8f:ca:5e:4a:fb:5a:fc:fe:20:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.28.slot.cdn.salesforce-communities.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.28.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admincamp.escortia.net
app.prachq.com
app.praxsuite.com
cdn.ap13.blitztesting.com
cdn.ap3.blitztesting.com
cdn.eu35.blitztesting.com
cdn.eu38.blitztesting.com
cdn.na125.blitztesting.com
cdn.na97.blitztesting.com
cms.evolis.com
cms.globalopticsdemo.tk
community.circles-concierge.com
community.delight.fit
community.good-sellers.com
community.murata.com
ent.circles-concierge.com
erp.isid.co.jp
files.goodsalespromotion.jp
forcehour.imbar.co
gsclub.gardenstory.jp
help.evbox.com
help.nfnl2.work
help.zyfexx.com
helpcenter.trackunit.com
idp.anotherdomainsp.tk
idp.anotherrandomspdomain2.ga
ir.k-springboard.com
irm.k-springboard.com
kundenportal.daheim-solar.de
kundentest.daheim-solar.de
members.tia.org.nz
nominate.vinsoftware.xyz
pardot.internet.asn.au
pardotemail.genomind.com
partner.ebis.ne.jp
partner.evbox.com
partners.upes.ac.in
portal.vevromerike.no
prod.28.slot.cdn.salesforce-communities.com
resources.canva.com
s-em.mylearningonline.com.au
salesforce-cms.aquilliance.de
salesforce.displaywise.com.au
salesforce.silvern.net
salesforce2.silvern.net
salesforce3.silvern.net
salesforce4.silvern.net
salesforce5.silvern.net
salesforce6.silvern.net
salesforce7.silvern.net
salesforce8.silvern.net
saninet.sanifair.de
site.techceed-ops.com
support.averna.com
support.ebis.ne.jp
support.escortia.net
supporter.ea.greenpeace.org
survey.delight.fit
updates.teammed.com.au
www.iwasedatabase.jp
www.k-springboard.com
www.wellnessfoods.jp
www3.inlite.com.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.28.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbA12eNjpd1w1zTXBwMh
OQ/4Pyy8AMMzu6DIlzLKPTc+ibY1C0kL/N9C9j02NaW3VODsnHpgw2OvxceTO+Df
hRfyX51YEHBRmyUGHYiPS3bcsRF0xp5tlswap0IhhDk6dmuKJVKpD1WVCSUTyJqG
8RD1MxFjmDQtxjidjdU6GyAN7gQbXVPuUfv89LpMFrEE3bJ5nkc/ehFbQxAukWsu
UyTJI/itBg3WGYScrES8QCRwm8pODoaUNnsmQV55m14rCWh5IBrHMVv13rr24X5k
CJdMr1Nr2Y7Y+IHG4IUULcXYZiR1T4uAzX+e9V962Z2dapfW4pT7PqU+FyHCoFKn
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 408047255626526110566225881457995106402775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-26 14:43:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 14:43:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22431072544046838335986678846540863931574726798926664482686369076254210374620499293984446360164940964586848302187948821872326918964418927777568605606575782785432513201807460471878535244273935511623253105470141824516123823108055928449598505806836212092713415832254325403089799723149226127993801591719018758204192854865609288201171892550315542514376141584493673296971358742834261142645027712390976531060966784580624138196721215670317026728632852479219010442378726473809622180872971011490711460342016460702634422459443076226237754425735728513696327472145421123834441724622195288897328712427270208251347666547473181222753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00b1c1b061d551a121378308194b971d516f7142
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1523 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admincamp.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.prachq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.praxsuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap13.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap3.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu35.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu38.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na125.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na97.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.evolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.globalopticsdemo.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.circles-concierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.good-sellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.murata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ent.circles-concierge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erp.isid.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.goodsalespromotion.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forcehour.imbar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsclub.gardenstory.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.nfnl2.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.zyfexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.trackunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.anotherdomainsp.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.anotherrandomspdomain2.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irm.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundentest.daheim-solar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.tia.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nominate.vinsoftware.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.internet.asn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotemail.genomind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.evbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.upes.ac.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.vevromerike.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.28.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.canva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's-em.mylearningonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce-cms.aquilliance.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.displaywise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce2.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce3.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce4.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce5.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce6.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce7.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce8.silvern.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saninet.sanifair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.techceed-ops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.averna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.ebis.ne.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.escortia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporter.ea.greenpeace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.delight.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updates.teammed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwasedatabase.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k-springboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessfoods.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.inlite.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000177df02399e000004030046304402206af7c0edfec3f29075a58096cc4349b87dfe023ff0ac95cbfeb50f62ed61cb05022069fdc668b98261ea3351821642e6daf8159eb326968780f59b05378156cd5e8a0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000177df023a17000004030047304502201bbef69650bdd6e7f4b8603a2d73fd171c4b43e948f4f5270b475dcedd912e5f022100a0d32258082a8b97c18e9f497736e3c9f48239d15a42ba1130f85846fb560565
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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