prod.2.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:91:ae:7d:dc:67:10:94:8e:fa:b2:00:37:ab:38:7f:92 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.2.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:91:ae:7d:dc:67:10:94:8e:fa:b2:00:37:ab:38:7f:92
Serial Number (int): 426907732190662324254619585314139479244690
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8b:34:ab:ee:05:65:8d:a1:ac:4c:76:78:a0:c2:b5:6d:5d:47:d7:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:fe:91:d1:b2:2c:1c:03:f0:d1:8a:9d:80:3a:27:5c:6b:a6:50:86
Fingerprint (sha256): 40:11:50:2b:62:c2:f0:4c:9a:aa:b2:74:89:34:b5:ad:4d:a7:c1:4b:cd:f0:f5:70:7e:07:ea:70:d9:11:c7:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.2.slot.cdn.salesforce-communities.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.2.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ankauf.ecary.de
apn.rickhansen.com
bfrg.alphanet.org
cdn.eu32.blitztesting.com
cdn.na122.blitztesting.com
cdn.na61.blitztesting.com
cdn.na64.blitztesting.com
cdn.na91.blitztesting.com
cdn.na93.blitztesting.com
cms.sahkolaitos.fi
communities.deluxe.com
community.athenasoftware.net
community.calcpa.org
content.macdc.org
content.mail.thron.com
content.maxex.com
crm.ecary.de
customer.bionic.co.uk
customer.lendai.us
customers.litmus.io
customersupport.zscaler.com
esgwarranty.doveresg.com
harmony.purplesense.org
help.clearbanc.com
help.merchant.quadpay.com
help.wework.com
hive.sambanova.ai
members.aaup.org
mon.strigo.ca
my.bethematch.org
my.strigo.ca
myactivities.educationfoundation.org
mycommunity.amgen.com
mywharton.wharton.upenn.edu
owners.conairgroup.com
pardot.regionalinternational.com
pardot.yorktownfunds.com
pardoteef.encinacapital.com
parents.uci.edu
partner.lendai.us
platform.pointcare.com
portal.healthplm.com
portal.urbanteachers.org
portalcf.iata.org
prod.2.slot.cdn.salesforce-communities.com
professional.alphanet.org
radsportsadidas.sfdxp.com
radsportsnike.sfdxp.com
radsportswoodlands.sfdxp.com
reunion.uci.edu
rhfactest.rickhansen.com
sales.grayshift.com
salesforce.netstream.ch
serviceprovider.purplesense.org
sfcdn.cypress.courses
sharedcertdemona61-1.blitztesting.com
sharedcertdemona64-1.blitztesting.com
source.netguru.com
subscriber.alphanet.org
success-test.exponentpartners.com
suppliers.appfolioinc.com
support-devcloud.sambanova.ai
support-research.sambanova.ai
support-retailmedia.criteo.com
support.meltio3d.com
support.sambanova.ai
survey.patientslikeme.com
tammberlin.wine
test.lendai.us
visit.profysio.ee
www.bfrg.alphanet.org
www.grandys.fr
www.hdc.hyundai.fr
www.olegforce.com
www.professional.alphanet.org
www.subscriber.alphanet.org
www.thebestirs.com
www.vrtxmedical.com
www3.bellevuecollege.edu

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com
*.na1.force.com

Certificate

The complete raw certificate details for prod.2.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L1lCrKhVmxtoUk17otp
4J1Q8JOZS2u8ruhVFM5OY5oRR3UDw6MrFn7zQmtDDt8aZuztBOu+HcNF4c7BDlvB
UcqTC/suDQ27TuA1OWjuRMMcAMNjWjEEvoEDbo0FyjCYboZfM/oiAf5i1ZPK3e1P
xC4p1gTNFSgQnKzzMpMEbE3sow3TfIgWE0aIWPPvKKu9DwjWInUiks0xlKlev0ld
swIWdFGZJtc2w69rZqumynbwZbFWSvU0f6t6FAYMneri+T1eo9wyzNWpQ/BJfkyL
D1pbvuhPFJZDCB6lGmOSTuBNTAmi4P/Zspv5d8xrYaHLAcBaf/Jreirh5197fyIH
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426907732190662324254619585314139479244690
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-28 22:05:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-26 22:05:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29380680756818417743488198477817002534782615715630817480083446157297687734052703575503849606882010866747191594416269109062257457555573349381605489412361102831084110869172807625722021517252067927268423384423872294213231041356545553682318721860962285376734034074904113147770617023639694943889740957889889426226995200627001865289819974775706386035032926405026972194122682743774555623778230750334184571536589905947278719833947655550920100539862863451336626537341436991358089483147045651902556876228621643939145666325174798448684912393792078393174622056824903433367912165928999075277240286445445188815861348495789593331491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b34abee05658da1ac4c7678a0c2b56d5d47d7e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1923 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankauf.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apn.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu32.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na122.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na61.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na64.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na91.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na93.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sahkolaitos.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communities.deluxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.athenasoftware.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.calcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.macdc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.mail.thron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.maxex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.ecary.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.bionic.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.litmus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersupport.zscaler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esgwarranty.doveresg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.clearbanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.merchant.quadpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.wework.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hive.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.aaup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bethematch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.strigo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myactivities.educationfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycommunity.amgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywharton.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owners.conairgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.regionalinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.yorktownfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardoteef.encinacapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parents.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.pointcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.healthplm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.urbanteachers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalcf.iata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.2.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsportsadidas.sfdxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsportsnike.sfdxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radsportswoodlands.sfdxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhfactest.rickhansen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.grayshift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.netstream.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceprovider.purplesense.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdn.cypress.courses'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedcertdemona61-1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedcertdemona64-1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'source.netguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success-test.exponentpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suppliers.appfolioinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-devcloud.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-research.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-retailmedia.criteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.meltio3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.sambanova.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.patientslikeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tammberlin.wine'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lendai.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visit.profysio.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfrg.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandys.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdc.hyundai.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olegforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professional.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.subscriber.alphanet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebestirs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vrtxmedical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.bellevuecollege.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b39cf41fe5f838c96a5dd569dc129f26be59e3572d74e902182c7b74a602e614e8510729dc86ea9b0c4ad083e8716a1a8c806f5d477edabf11750fa34f73902f2b04834e450fa41252f7c2d5c95a18176134e3b909355dcf1994608150d8d276485befc6a3046e78e106a0de129a171f73e85a567c7d2b12500beef840ffa8e4728bb4732aaa97467765feb11e4c0923ce4c525bdc242bde2fa902d28fec8e9cd42af5f52b2fa08b69d94f2380c3b4f62033ef46bde75d028f1cb5bc002cd6ce4447b90aa8ab9c7084f7bd36dd707af36d8ac5bedc08a4d087c4ffa09d212833222435ac4491cc1f9982dfcb322baf8d51093a22b00c7c7ea5f5dcec1700877a