prod.29.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:98:87:99:eb:28:ff:b6:11:c3:bd:0b:8c:4c:9e:c8:13:92 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.29.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:98:87:99:eb:28:ff:b6:11:c3:bd:0b:8c:4c:9e:c8:13:92
Serial Number (int): 400352308469488474649005420884132012495762
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:04:d9:6a:cd:2f:b3:a7:56:f4:c9:3d:fb:81:89:d2:81:a4:b9:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:cb:69:d5:d5:9f:b8:20:1a:5f:46:21:dc:32:e4:b5:ee:b5:9f:2d
Fingerprint (sha256): 3f:da:c1:51:d8:44:5e:c1:dc:25:5d:3d:92:31:46:4c:75:fd:27:18:15:19:56:52:08:e8:79:b9:2c:97:c0:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.29.slot.cdn.salesforce-communities.com

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.29.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

birdseyecoupon.readyseteat.com
cdn.eu28.blitztesting.com
cdn.eu43.blitztesting.com
cdn.na131.blitztesting.com
cdn.na49.blitztesting.com
cdn.na65.blitztesting.com
cms.acrotec.ch
coder.episource.com
coding.episource.com
community-beta.vtex.com
community.vtex.com
contactus.conagrabrands.com
content.cheshireimpact.com
customercontactus.conagrabrands.com
customerportal.interlacehealth.com
distribution.st.com
duncanhines.conagrabrands.com
email.subrat.in
faq.bmw.ch
faq.bmw.co.za
faq.bmw.es
faq.bmw.pt
faq.mini.ch
faq.mini.co.za
faq.mini.es
faq.mini.nl
faq.mini.pt
greenwire.greenpeace.org.uk
healthychoicecoupon.readyseteat.com
helpcenter.conagrabrands.com
mariecallenders.conagrabrands.com
mk.marykayintouch.ua
my.diehardassurance.com
offres.beaba.com
p.trustpayments.com
partners.adyen.com
partners.n2media.com
prod.29.slot.cdn.salesforce-communities.com
restaurant.foodpanda.co.jp
restaurant.foodpanda.co.th
restaurant.foodpanda.com.bd
restaurant.foodpanda.hk
restaurant.foodpanda.my
restaurant.foodpanda.ph
restaurant.foodpanda.pk
rlesa.repsol.com
salesforcecms.adstream.com
sfc.terry.uga.edu
sponsor.continuvue.com
suite.cm.tourlane.com
support.exact.com
support.lavu.com
support.margindriver.com
support.n2media.com
support.zspace.com
uploads.episource.com
us.support.gohenry.com
www.diehardassurance.com
www.mycqstore.com
www.myindstore.com
www.restaurant.foodpanda.co.jp
www.restaurant.foodpanda.co.th
www.restaurant.foodpanda.com.bd
www.restaurant.foodpanda.hk
www.restaurant.foodpanda.my
www.restaurant.foodpanda.ph
www.restaurant.foodpanda.pk

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com
na38-1.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.29.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhJw6Zw1QredUvayl2qu
jH5qE5eVdiT3fkLONENLumSPwlVYOB1NZcyaOoquADaKEt9F0Sv0DDXMJXR96869
HtKjuo/k9ASmscOdNDwoty+2wLZ42BoTLTAZqmX7r23/Zw1h6H8hX25n0iMOli5d
s/oOIM3kmgKIJRRdocVXBLFwDA+HJytQz5rg72I3xy7CSP5xA98ii9Ss7Gaq9IGN
q4tjTibOr8BRj/to90YxH6e7H+vMl0T1bPtA1/kfSYJYEJbB/brdJqzQle64pwRM
Fc39zjo2CvtjV6EsIOgg2Msx4V7/10GyFmLOJ7WFY5p4D63SdEeiFECHhkXoXB4P
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400352308469488474649005420884132012495762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 23:08:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 23:08:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21974558691976842129925841724907713058549192771272474202912218711864565442340931742831185815067580227728739089621535933957477273059692150730500418211175927465619230597951150836212040910237094490534454117024453089401541439678617558945404469737534481674128190157436244515984584274829722025412444004009942835142837497852507082115689974472281922958809329941450675847911665780559964663349371182122478667843247268113393134391062656850484323504318026671351970910180862222362088729559093030532237475874008542192624782249754102959705677644907052516250507629714037347300305446198026798992122865614285971863725490555592567033833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf04d96acd2fb3a756f4c93dfb8189d281a4b9ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1624 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdseyecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu43.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na131.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na49.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na65.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.acrotec.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coder.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coding.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-beta.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.vtex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.cheshireimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customercontactus.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerportal.interlacehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distribution.st.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanhines.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.subrat.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwire.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthychoicecoupon.readyseteat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariecallenders.conagrabrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offres.beaba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.trustpayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.adyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.29.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlesa.repsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.adstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.terry.uga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.continuvue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suite.cm.tourlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.exact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.lavu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.margindriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.n2media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.zspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.episource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.support.gohenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diehardassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycqstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myindstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.restaurant.foodpanda.pk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001770885cdcc0000040300473045022100ef67fb255cdabe9ed5670e7d91bc987fde4040c9c94f5189bdd162a3d236a96a0220022ebfa9d82725247df351a70b88a5d17d36917a0196f342a6b8c936639003200077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001770885cde900000403004830460221009ab9bdbaac450a9c2ead5083f26f3f649113b3d3b609c918c30b16a38322433f022100eabca1234acbdc291ccb24b688fe8cddca779f74b90dc4f65a245e12267de7bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b62e4883664d585f4adb09171247b673a4fa5f60136471edd8f27387f38da13c1fc9b3dc7734ffdf1fd267f72ac17e059a7f62ef49792fff99054a28afc17f089234791161022471da61d6add645b183c286ee9265f720218c682f67700349026cdb28d0254fd4707fb15ef632c2dcea83922008f5d8cef2ff20eef208dc01d5eb5511481b3ca8852783ae2fe62b2d6052a0821cf5191c5c072781e830a136e5a8f4241423ce62d1c9bb7bbc14801354c71d136b96c3d4bcb7216e6e13cdafe04b97c197ca5405281680bbf8bd8461dd4a4bbbce55b5fc51495b55ba5af482293cb270f3ed8478fbd1f3e1da6edf9bb8eb869f48b5a0ae47f737dd911e103f3