prod.13.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:fa:c7:c5:3c:c0:68:1e:a5:95:1c:b0:94:d2:15:7c:2c:06 was issued on by Let's Encrypt.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.13.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:c7:c5:3c:c0:68:1e:a5:95:1c:b0:94:d2:15:7c:2c:06
Serial Number (int): 346672990011346292338042116915463989242886
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:8f:24:db:0d:0f:1c:5d:8e:92:f2:d4:55:38:aa:18:c3:23:33:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:ab:59:8e:de:db:0e:3e:5e:4a:a5:12:54:66:42:f6:d3:72:c4:ac
Fingerprint (sha256): 3e:9c:9b:d7:22:00:da:05:0b:3e:bb:72:f7:fe:20:fe:b2:db:a8:1d:47:74:45:ec:2b:69:5a:15:e9:81:79:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.13.slot.cdn.salesforce-communities.com

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.13.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ar.verallia.com
assets.run.aeb.com
b2b.fruit.com
b2breturns.gopro.com
bioadvancemember.ca
cdn.ap12.blitztesting.com
cdn.ap22.blitztesting.com
cdn.ap26.blitztesting.com
cdn.ap28.blitztesting.com
cdn.eu36.blitztesting.com
cdn.na104.blitztesting.com
cdn.na121.blitztesting.com
cdn.na149.blitztesting.com
cdn.na151.blitztesting.com
cdn.na202.blitztesting.com
cdn.usa1.blitztesting.com
cms.alukoenigstahl.com
cms.arno.de
cms.rajapack.be
community.disguise.one
community.mdmep.org
community.tcpsoftware.com
consumercare.coscokids.com
content.aligroup.com.au
content.ingroupe.community
customer.progressa.com
customer.resmed.jp
customers.spryker.com
engage.flexpricer.com
es.verallia.com
falconprod.blitztesting.com
go.zebra-med.com
go2.prodomo.fr
help.avidxchange.com
host.yooralla.com.au
images.iscsrl.com
info.airinnovations.com
info.stjohnvic.com.au
loja.sol-m.com
marketing.diag.bracco.com
mineralsinfo.global.weir
my.centaman.io
my.solidify.com
mycevora.cevora.be
newshop.heidelberg.com
originate.mtg.loan
pardot.eu.vipre.com
pay.healthengine.com.au
pipardot.predictiveindex.com
pom.ywamships.org
prod.13.slot.cdn.salesforce-communities.com
pt.verallia.com
rews.salesforce.com
salesforce.microstrat.com
salesforce.standards.org.au
salesforcecms.recent.kr
sfcms.armentekort.be
sfcontent.sharedhope.org
sfcontent.vbrick.com
sharedg202test1.blitztesting.com
successhub.mtcaustralia.com.au
support.mapanything.com
ua.verallia.com
university.groople.com
usa1.shared.blitztesting.com
usa1.tmr.blitztesting.com
whexceptions.gopro.com
www.fieldservice.act.gov.au
www.notify.worksafe.act.gov.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.13.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1du68Qf9QQFNUDufkpx
Ob33Hw4sH6ohHPcE0Cf6kb4hmQImtlW93Xjic+vP/hfcsoelmKNiHKhvf50ljXlF
IiCgnajjOP9fvr06axOmD2d+IpkiUviDjNP6y/otopGzXfLlQxLPYlf/X+Don6RL
uTBSObg7+KJqNhF6kCWFLmliumA4tBn3CnQy1QaqVxSQ7/2uO2cYU1Ugah/p5K22
2z305UnfY+ALkJ7c5OgZ/F4DJFjUgTYk7SJ6G+0oPpFNhlRZhOs2sNrIkI4xtsPV
DxOVSDkEmuaqwJlwzBQtUHisrzvSJNFQKLKxmWWuEktkwqLMPGSCkj/xRRRsoJ7N
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346672990011346292338042116915463989242886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 17:43:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 17:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22639771548677202618380040823466989812215664425475339512735512788476562358659515851922186431604539136268089297672887142046695551412149125973895655712330738528228318738304800814395799637604867510296820412823170029158158985567181897223758199462988584978285963124798029671376855994874809479414010873063589895764061386857701107390198835770445931737430476980157964375782697653518744667257121518951659543854202706074479645951269597480325806338565902644994304599535021770433272756227455459613651064558797420189948159574198716046449786187378182953798080232008728546023421849420482428412836589434072861961311223944857532681647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							548f24db0d0f1c5d8e92f2d45538aa18c3233399
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1658 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.run.aeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.fruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2breturns.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioadvancemember.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap12.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap22.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap26.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu36.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na104.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na121.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na149.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na151.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na202.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.usa1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.alukoenigstahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.arno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.rajapack.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.disguise.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mdmep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.tcpsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumercare.coscokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aligroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ingroupe.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.progressa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.resmed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.spryker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.flexpricer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconprod.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.zebra-med.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2.prodomo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.avidxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.yooralla.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iscsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.airinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.stjohnvic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.sol-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.diag.bracco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralsinfo.global.weir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.centaman.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.solidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycevora.cevora.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newshop.heidelberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originate.mtg.loan'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.healthengine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipardot.predictiveindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pom.ywamships.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rews.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.microstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.standards.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.recent.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.armentekort.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.sharedhope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.vbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedg202test1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successhub.mtcaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mapanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.groople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa1.shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa1.tmr.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whexceptions.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldservice.act.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notify.worksafe.act.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e436d20360000040300473045022100a45a3c1553609597a65ed57ca6773300fa365393f9579f5f9d01335a5d8df1fc02205a990f1fc3f52a8b601bc71d3cd2de170105118b0d0610e34fd27d5475ccbfbb007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e436d22380000040300473045022100a0a679f40a53d5c354d66e8b3c125b1958f8b04699590da962b5fad05f2ef69902202ff55ab62a8214d5048668d9f459486fdf05305c628abedf1b3aae953768a357
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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