prod.13.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:53:5f:1e:a4:e7:39:4b:3f:3f:72:fc:e9:9d:68:b2:05:ab was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.13.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:5f:1e:a4:e7:39:4b:3f:3f:72:fc:e9:9d:68:b2:05:ab
Serial Number (int): 289706730022858567613431326839322616923563
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:c1:19:b5:45:47:fb:15:27:4e:60:d8:74:b3:3a:bb:c6:e4:7d:43
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:01:40:26:b5:b1:ea:37:cb:94:a4:8b:01:4d:45:f9:43:12:4f:35
Fingerprint (sha256): 48:56:e4:de:15:08:4a:f9:3b:6a:da:7f:ca:35:9b:ea:37:87:f2:a4:e5:d2:fa:68:7b:d0:7d:d4:98:ee:56:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.13.slot.cdn.salesforce-communities.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.13.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alumnilife.iqs.edu
apmumbaiselfs.blitztesting.com
ar.verallia.com
assets.run.aeb.com
b2b.fruit.com
b2breturns.gopro.com
bioadvancemember.ca
capitalizacaoonline.icatuseguros.com.br
cdn.ap12.blitztesting.com
cdn.ap22.blitztesting.com
cdn.ap26.blitztesting.com
cdn.ap28.blitztesting.com
cdn.eu36.blitztesting.com
cdn.ind1.blitztesting.com
cdn.na104.blitztesting.com
cdn.na109.blitztesting.com
cdn.na121.blitztesting.com
cdn.na149.blitztesting.com
cdn.na151.blitztesting.com
cdn.na155.blitztesting.com
cdn.na202.blitztesting.com
cdn.usa1.blitztesting.com
cms.alukoenigstahl.com
cms.webscalenet.info
community.disguise.one
community.mdmep.org
content.aligroup.com.au
content.ingroupe.community
customer.progressa.com
customers.spryker.com
engage.flexpricer.com
es.verallia.com
falconprod.blitztesting.com
go.zebra-med.com
go2.prodomo.fr
help.avidxchange.com
help.bachhoaviet.com
host.acara.edu.au
host.yooralla.com.au
images.iscsrl.com
images.stoneco.com
info.airinnovations.com
info.stjohnvic.com.au
loja.sol-m.com
mail.aiacommunity.com
marketing.diag.bracco.com
mineralsinfo.global.weir
mode.wesgroup.ca
my.centaman.io
my.solidify.com
mycevora.cevora.be
pardot.eu.vipre.com
pay.healthengine.com.au
pipardot.predictiveindex.com
pom.ywamships.org
prod.13.slot.cdn.salesforce-communities.com
pt.verallia.com
rews.salesforce.com
salesforce.standards.org.au
salesforcecms.recent.kr
sfcms.armentekort.be
sfcontent.vbrick.com
sharedg202test1.blitztesting.com
successhub.mtcaustralia.com.au
support.calytera.com
support.mapanything.com
support01.calytera.com
testorgind6falcon.blitztesting.com
ua.verallia.com
university.groople.com
useastfalcon.blitztesting.com
whexceptions.gopro.com
www.aiqsalumni.org
www.fieldservice.act.gov.au
www.notify.worksafe.act.gov.au

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.13.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXBefFft4W7Uw6FxVPK9
9OcRpdFBk9h16w+J76UVHOHbMNubzcn7j/kbw5eYXvmp9a3sxQoAlK0vlek99kCu
xKxQ2RbhiakGWYjhhzc/nHyFX93RrZn92qJplc7lnyu1rOBl5GdSA/9kdKi1TPg8
Lg7Y0dyxi+88y8Jnr8X+5AnvelzltSwGlzFe/n3LRwZtW4avYhZpp/zdV8gZTOHa
hQUZ4oIO9QWblXWZC3HqEzFBoGGjp1ZvLk/zqjN420pMDBbMRvpxmXqIqUNHdBv8
JUgfM3rGNSsyDM5an0Qf+1Oq4zcvGhn+5bGcAzq7YcdBZx3v3qL9nFB5oaUhGj9E
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289706730022858567613431326839322616923563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-25 05:31:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 05:31:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24419404119385375430915607197992252044214532437981051585617869399601785252067371715071070075840282128264602826267147398878880902739146372102178388187238140220638824868852650501769122361022530781214575826383606729496467142582238508585709389043978513969635128117952473724991700904684907102829814981468782032121261718344745790321196208528151187037379613513382326446947631053156766505722178717188608248414674887301968957875719645952139845203948669217105050018002164241385391122328141749551606381444275105339318599124789767802355263775675368422705820628961708918806107855122713951594357609609502070319027003561149909124207
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02c119b54547fb15274e60d874b33abbc6e47d43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1832 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnilife.iqs.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apmumbaiselfs.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.run.aeb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.fruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2breturns.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioadvancemember.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalizacaoonline.icatuseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap12.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap22.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap26.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap28.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu36.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ind1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na104.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na109.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na121.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na149.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na151.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na155.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na202.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.usa1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.alukoenigstahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.webscalenet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.disguise.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.mdmep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.aligroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.ingroupe.community'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.progressa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.spryker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engage.flexpricer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falconprod.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.zebra-med.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go2.prodomo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.avidxchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.bachhoaviet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.acara.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'host.yooralla.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.iscsrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.stoneco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.airinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.stjohnvic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loja.sol-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aiacommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.diag.bracco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralsinfo.global.weir'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mode.wesgroup.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.centaman.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.solidify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycevora.cevora.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.healthengine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipardot.predictiveindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pom.ywamships.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.13.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rews.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.standards.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcecms.recent.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.armentekort.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcontent.vbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedg202test1.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'successhub.mtcaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.calytera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.mapanything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support01.calytera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testorgind6falcon.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ua.verallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'university.groople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useastfalcon.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whexceptions.gopro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiqsalumni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fieldservice.act.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notify.worksafe.act.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001786814691a0000040300473045022077a86dc3de510ae93a00268a537d4100b4ab534e1620d300edf902815bb26939022100e42d1eb8644e13f66cf882c7878bfb251a57c3eb412c942972979af63bead53d0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017868146af60000040300473045022100b4cd2fa6bf99c3c996b017ad4679e9882dc351381815659a16dd25fee2801d9402201c15abf7bc2a11c2f863d579bfcf88d32d3f732c018eef133786c5e40979e28d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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