prod.13.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5e:cc:bf:37:a0:27:1e:b1:ab:df:0d:67:a7:c0:ee:ad:c5 was issued on by Let's Encrypt.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.13.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5e:cc:bf:37:a0:27:1e:b1:ab:df:0d:67:a7:c0:ee:ad:c5
Serial Number (int): 380707841585670446367513358623581177556421
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:bf:f0:d8:2f:2b:c0:e6:88:68:07:0a:35:8c:df:7d:c6:3c:60:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:4b:64:34:e1:52:8c:76:f2:95:81:b0:14:2d:3b:c5:c5:27:83:9f
Fingerprint (sha256): 3c:77:32:1e:19:57:77:15:0b:a0:6f:1f:43:90:82:5a:33:f1:9a:63:2d:6a:4b:88:35:32:69:36:17:c3:27:0b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.13.slot.cdn.salesforce-communities.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.13.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.verallia.com
assets.run.aeb.com
b2b.fruit.com
b2breturns.gopro.com
bioadvancemember.ca
cdn.ap12.blitztesting.com
cdn.ap22.blitztesting.com
cdn.ap26.blitztesting.com
cdn.ap28.blitztesting.com
cdn.eu36.blitztesting.com
cdn.na104.blitztesting.com
cdn.na121.blitztesting.com
cdn.na149.blitztesting.com
cdn.na151.blitztesting.com
cdn.na202.blitztesting.com
cdn.usa1.blitztesting.com
cms.alukoenigstahl.com
cms.arno.de
cms.rajapack.be
community.disguise.one
community.mdmep.org
community.tcpsoftware.com
consumercare.coscokids.com
content.aligroup.com.au
content.ingroupe.community
customer.progressa.com
customer.resmed.jp
customers.spryker.com
engage.flexpricer.com
es.verallia.com
falconprod.blitztesting.com
go.zebra-med.com
go2.prodomo.fr
help.avidxchange.com
host.yooralla.com.au
images.iscsrl.com
info.airinnovations.com
info.stjohnvic.com.au
marketing.diag.bracco.com
mineralsinfo.global.weir
my.centaman.io
my.solidify.com
mycevora.cevora.be
newshop.heidelberg.com
originate.mtg.loan
pardot.eu.vipre.com
pay.healthengine.com.au
pipardot.predictiveindex.com
pom.ywamships.org
prod.13.slot.cdn.salesforce-communities.com
pt.verallia.com
rews.salesforce.com
salesforce.microstrat.com
salesforce.standards.org.au
salesforcecms.recent.kr
sfcms.armentekort.be
sfcontent.sharedhope.org
sfcontent.vbrick.com
sharedg202test1.blitztesting.com
successhub.mtcaustralia.com.au
support.mapanything.com
ua.verallia.com
university.groople.com
usa1.shared.blitztesting.com
usa1.tmr.blitztesting.com
whexceptions.gopro.com
www.fieldservice.act.gov.au
www.notify.worksafe.act.gov.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.13.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIUEBb3wIM2c12YUHeqI
Q3j60ytNeyObbnAW2o8Njt0WDqMAdedN4nzpZrrP7LL9D3eBqrIhxb9ue3A1QiMn
hAf1sixGcecQmSYLb3kuH19MbUyh7lAQNh7HTbTgUZ5eDEKm3nJecXxAhSfW8boS
1unoMztrY1RJP5gekwxa6YK/a1/kpnUgI5KWlr+STO1WzMouJWS0gJ73/QIu1GWz
AjwmU/bcpcDGY+sY3VXN3KoxeJeFidFSWkG6UV9vbOd7rHcMFlkWJ2duezEZVjmZ
uq0zwHJvgPw0KPuxt6kM7HVDvj9Px9aqLYlUAgTS5cBiOrofnZDAGK2t5Z5e8zMT
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380707841585670446367513358623581177556421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 20:14:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-29 20:14:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24303347046039453484972052660142424934189652751435899518316722142764397462641575694789209753027596654142429896912439788405475235910876607767842087270461866569380683661826185805884950673941461686222355792954940603069698098399939309884534623722958350425987182233002297343054468277611336677933043276333106023805996979701398534578271425754309030114944815554779029643730015659075099641647364497989996700264258056111944995775268839211273706809648333108487275388497247864964657739420191579700743478574575962002450059402957411975724523771751431425060689876007447571947013581939700545267729021700715872377717677150577888531409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05bff0d82f2bc0e68868070a358cdf7dc63c6033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.run.aeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.fruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2breturns.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioadvancemember.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap12.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap22.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap26.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu36.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na104.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na121.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na149.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na151.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na202.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.usa1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.alukoenigstahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.arno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.rajapack.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.disguise.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mdmep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.tcpsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumercare.coscokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aligroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ingroupe.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.progressa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.resmed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.spryker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.flexpricer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconprod.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.zebra-med.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2.prodomo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.avidxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.yooralla.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iscsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.airinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.stjohnvic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.diag.bracco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralsinfo.global.weir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.centaman.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.solidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycevora.cevora.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newshop.heidelberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originate.mtg.loan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.healthengine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipardot.predictiveindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pom.ywamships.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rews.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.microstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.standards.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.recent.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.armentekort.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.sharedhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.vbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedg202test1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successhub.mtcaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mapanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.groople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa1.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa1.tmr.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whexceptions.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldservice.act.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notify.worksafe.act.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fd080bc610000040300483046022100ce4806bf234199ffab1cd7fb1e58d429865ad02be2468c333fc5438d34897411022100c66462804ea26e1534d26d0f50f27e8d1fc9132c3aaf78484b48a2c326333775007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fd080bcaf0000040300473045022100bc4902594c5319e7c7c2f436099480a6330312c5e88d562c9131004e7574503802202cfb0a076f22d66dd470a988f5c39f98a87f3e559cfe8e5908fce04310629a1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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