prod.12.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:96:1f:b1:33:30:fd:5a:14:9a:08:b5:7a:89:6b:85:ae:ee was issued on by Let's Encrypt.

With 66 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.12.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:96:1f:b1:33:30:fd:5a:14:9a:08:b5:7a:89:6b:85:ae:ee
Serial Number (int): 399533624907879299357569258273625757560558
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:87:3a:2a:a4:b4:ea:eb:81:95:92:86:13:9c:73:5a:e4:cb:fa:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cd:d4:4c:29:33:fd:9d:9a:ca:4d:1e:3b:a9:db:43:0d:ae:40:09:2b
Fingerprint (sha256): 50:9b:82:20:44:91:12:b8:e4:e8:52:96:8b:e0:7f:a1:c6:ab:cc:9a:b1:da:04:24:37:6e:ea:a6:a0:3c:83:09

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.12.slot.cdn.salesforce-communities.com

66

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.12.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.inquirer.com
agency.nycers.org
articles.coronafacts.com
aws.nmb.gov
cdn.ap20.blitztesting.com
cdn.na21.blitztesting.com
cdn.na85.blitztesting.com
clients.lexmedicus.com.au
cms.classvipartners.com
cms.forensicanalytical.com
cms.ufm.edu
community.greencamps.org
compliance.liqid.de
consumidorfaq.eudora.com.br
contacts.bayareametro.gov
content.nbcuni.com
courtyard.law.ou.edu
email.truelearn.com
experts.lexmedicus.com.au
hello.addigy.com
help.stellainsurance.com.au
help.workgrid.com
helpdesk.edsurge.com
info.microbiologics.com
info.theretirementsolution.com
itsc-demo-config.tanium.com
m.perkville.com
medical.nycers.org
members.cyber.nj.gov
my.airforce.com
my.ymcade.org
mynycers.nycers.org
njshield.njohsp.gov
p.cbhhomes.com
pardot-uk.eu.vipre.com
pardot.lexmedicus.com.au
pardot.soljit.com
pardot.tdwilliamson.com
pardotcms.dbu.edu
partners.cyber.gov.au
partners.cyber.nj.gov
partners.panduit.com
partners.streamsets.com
pfhsfcms.jacksbasket.org
portal.coolgardie.wa.gov.au
preferredplayer.fila.com
prime.chrisstewart.com.au
prod.12.slot.cdn.salesforce-communities.com
retailer.charlottesweb.com
sales.optios.com
salesforce.jae.com
salesforce.koresoftware.com
salesforce.optios.com
sigma.sforcedemo.com
support.apricot.info
support.socialsolutions.com
support.stedwards.edu
tdwaccess.tdwilliamson.com
testsupport.stedwards.edu
www.agriskportal.com
www.clipperstartcard.com
www.cochezycia.com
www.communitytrustcafe.com
www.csiselementary.org
www.icpmasterworkscommunity.com
www.lymi.fund

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.12.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILGTCCCgGgAwIBAgISBJYfsTMw/VoUmgi1eolrha7uMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMzAyMjA3NDNaFw0yNDAxMjgyMjA3NDJaMDYxNDAyBgNVBAMT
K3Byb2QuMTIuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNF1v4WxgB8tmKhzj8jQ9tcX7q
LnaA9ItWwYhAZvzL02p9fPGcb6EUHUYkT2TycWPqPCRLUWhFyAaFNv0sGRGgg5Or
+cc3valetmmlIDmd37akxvWRR58xcp7JgxK47FEbL+Sb3LV34ndGNuONMbI2lQDY
pTuRhoG8xpDAecIqoVeY6LFH2WQ+F0zTnK3jfQmlgXURmb6+yLBhlzlLNAt68HRM
yAYp3nmolHCMkhfE0i++kDqPZRIBT/DQomx6ErenjmTAjNfNDoMuP0j/hocSUNk9
mNv/PVsSUmmUfd2iq3Eyt32E98HMffjgIb/oXId9XtIv0AnO2U/JDUDQcArlAgMB
AAGjgggjMIIIHzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOaHOiqktOrrgZWShhOc
c1rky/pVMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGKwYDVR0RBIIGIjCCBh6C
FGFjY291bnQuaW5xdWlyZXIuY29tghFhZ2VuY3kubnljZXJzLm9yZ4IYYXJ0aWNs
ZXMuY29yb25hZmFjdHMuY29tggthd3Mubm1iLmdvdoIZY2RuLmFwMjAuYmxpdHp0
ZXN0aW5nLmNvbYIZY2RuLm5hMjEuYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLm5hODUu
YmxpdHp0ZXN0aW5nLmNvbYIZY2xpZW50cy5sZXhtZWRpY3VzLmNvbS5hdYIXY21z
LmNsYXNzdmlwYXJ0bmVycy5jb22CGmNtcy5mb3JlbnNpY2FuYWx5dGljYWwuY29t
ggtjbXMudWZtLmVkdYIYY29tbXVuaXR5LmdyZWVuY2FtcHMub3JnghNjb21wbGlh
bmNlLmxpcWlkLmRlghtjb25zdW1pZG9yZmFxLmV1ZG9yYS5jb20uYnKCGWNvbnRh
Y3RzLmJheWFyZWFtZXRyby5nb3aCEmNvbnRlbnQubmJjdW5pLmNvbYIUY291cnR5
YXJkLmxhdy5vdS5lZHWCE2VtYWlsLnRydWVsZWFybi5jb22CGWV4cGVydHMubGV4
bWVkaWN1cy5jb20uYXWCEGhlbGxvLmFkZGlneS5jb22CG2hlbHAuc3RlbGxhaW5z
dXJhbmNlLmNvbS5hdYIRaGVscC53b3JrZ3JpZC5jb22CFGhlbHBkZXNrLmVkc3Vy
Z2UuY29tghdpbmZvLm1pY3JvYmlvbG9naWNzLmNvbYIeaW5mby50aGVyZXRpcmVt
ZW50c29sdXRpb24uY29tghtpdHNjLWRlbW8tY29uZmlnLnRhbml1bS5jb22CD20u
cGVya3ZpbGxlLmNvbYISbWVkaWNhbC5ueWNlcnMub3JnghRtZW1iZXJzLmN5YmVy
Lm5qLmdvdoIPbXkuYWlyZm9yY2UuY29tgg1teS55bWNhZGUub3JnghNteW55Y2Vy
cy5ueWNlcnMub3JnghNuanNoaWVsZC5uam9oc3AuZ292gg5wLmNiaGhvbWVzLmNv
bYIWcGFyZG90LXVrLmV1LnZpcHJlLmNvbYIYcGFyZG90LmxleG1lZGljdXMuY29t
LmF1ghFwYXJkb3Quc29saml0LmNvbYIXcGFyZG90LnRkd2lsbGlhbXNvbi5jb22C
EXBhcmRvdGNtcy5kYnUuZWR1ghVwYXJ0bmVycy5jeWJlci5nb3YuYXWCFXBhcnRu
ZXJzLmN5YmVyLm5qLmdvdoIUcGFydG5lcnMucGFuZHVpdC5jb22CF3BhcnRuZXJz
LnN0cmVhbXNldHMuY29tghhwZmhzZmNtcy5qYWNrc2Jhc2tldC5vcmeCG3BvcnRh
bC5jb29sZ2FyZGllLndhLmdvdi5hdYIYcHJlZmVycmVkcGxheWVyLmZpbGEuY29t
ghlwcmltZS5jaHJpc3N0ZXdhcnQuY29tLmF1gitwcm9kLjEyLnNsb3QuY2RuLnNh
bGVzZm9yY2UtY29tbXVuaXRpZXMuY29tghpyZXRhaWxlci5jaGFybG90dGVzd2Vi
LmNvbYIQc2FsZXMub3B0aW9zLmNvbYISc2FsZXNmb3JjZS5qYWUuY29tghtzYWxl
c2ZvcmNlLmtvcmVzb2Z0d2FyZS5jb22CFXNhbGVzZm9yY2Uub3B0aW9zLmNvbYIU
c2lnbWEuc2ZvcmNlZGVtby5jb22CFHN1cHBvcnQuYXByaWNvdC5pbmZvghtzdXBw
b3J0LnNvY2lhbHNvbHV0aW9ucy5jb22CFXN1cHBvcnQuc3RlZHdhcmRzLmVkdYIa
dGR3YWNjZXNzLnRkd2lsbGlhbXNvbi5jb22CGXRlc3RzdXBwb3J0LnN0ZWR3YXJk
cy5lZHWCFHd3dy5hZ3Jpc2twb3J0YWwuY29tghh3d3cuY2xpcHBlcnN0YXJ0Y2Fy
ZC5jb22CEnd3dy5jb2NoZXp5Y2lhLmNvbYIad3d3LmNvbW11bml0eXRydXN0Y2Fm
ZS5jb22CFnd3dy5jc2lzZWxlbWVudGFyeS5vcmeCH3d3dy5pY3BtYXN0ZXJ3b3Jr
c2NvbW11bml0eS5jb22CDXd3dy5seW1pLmZ1bmQwEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDatr9rP7W2Ip+bwrtca+hwkXFs
u1GEhTS9pD0wSNf7qwAAAYuC19FhAAAEAwBGMEQCIHFq3Tjv2sP0um4uV71ypw/l
sJ6Wtbe1OZ2/qM9ROjG1AiBhu+fKKeZO26U2EwX1PPF8dV5/WdLeNYMZ1J2nGVpD
UAB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABi4LX0WcAAAQD
AEcwRQIgNftCwh/X0PNh7v4H3CmCC5kadb+V0HL2N+Yq7/lvgTACIQD7hK9fMuq7
EEJxfv37p+lZGoIZ5i3HghET9v9rM8YolDANBgkqhkiG9w0BAQsFAAOCAQEAXKPp
IFZNXt/arFAeIJN+hvaxmfNn0Ef6JNctbHh1DHklQYSKB+avJu7kB7CnVrhS9+HR
oN8yzAHBdYUNS6iPiotgIOoNvQwswmdkx+LK4Nzr6NuM9rdnVvghDAdunKQE7riE
aP3Q5W5WrfJlWAOxypIhkHkQuNZ8aLD+QjzqQSdFQkjhbubym6k82mzKvh2OBLJu
AQN6cMJUMa9vNrjn3TtyFS1AuePyisa34dwZpqi0zBVVoZ3n9Bz3fu4KRkICCOuk
wBfYecc/pUr0ROkyvQdow5eMWprbuuwsvGWRcIlUrMzxkiUvuZOo86OYLoXDXyrV
U7chDTtCtKQSnw/ZDg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRdb+FsYAfLZioc4/I0P
bXF+6i52gPSLVsGIQGb8y9NqfXzxnG+hFB1GJE9k8nFj6jwkS1FoRcgGhTb9LBkR
oIOTq/nHN72pXrZppSA5nd+2pMb1kUefMXKeyYMSuOxRGy/km9y1d+J3RjbjjTGy
NpUA2KU7kYaBvMaQwHnCKqFXmOixR9lkPhdM05yt430JpYF1EZm+vsiwYZc5SzQL
evB0TMgGKd55qJRwjJIXxNIvvpA6j2USAU/w0KJsehK3p45kwIzXzQ6DLj9I/4aH
ElDZPZjb/z1bElJplH3doqtxMrd9hPfBzH344CG/6FyHfV7SL9AJztlPyQ1A0HAK
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399533624907879299357569258273625757560558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 22:07:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 22:07:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25890371397653510739689852820535295828114583852532932844855390637588956491461475638880637900544089893115807936410688154199919386703860514953451713247952196235761723140169192131687953166980038795792654092653948368961621880788249445160167688123446653968071865929307747045773050798400819398035910998617090983140142717434089225266458165065956379744238887338543806979997441216769095156336405222837833031853683219642781736292124595996887930629964709103989632096381592872895336850109523475833458112407001880149064987001623106653444775832674691456008736754734552455750695564582848634602285747420258353613321886621789913615077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6873a2aa4b4eaeb81959286139c735ae4cbfa55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.inquirer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'articles.coronafacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.nmb.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap20.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na85.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.classvipartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.forensicanalytical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ufm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.greencamps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.liqid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumidorfaq.eudora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contacts.bayareametro.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtyard.law.ou.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.truelearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experts.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.addigy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stellainsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.edsurge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.microbiologics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.theretirementsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsc-demo-config.tanium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.perkville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.airforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.ymcade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynycers.nycers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njshield.njohsp.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.cbhhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot-uk.eu.vipre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.lexmedicus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.soljit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardotcms.dbu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.cyber.nj.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.panduit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.streamsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfhsfcms.jacksbasket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.coolgardie.wa.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferredplayer.fila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.chrisstewart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.12.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retailer.charlottesweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.jae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.koresoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.optios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigma.sforcedemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.apricot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.socialsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdwaccess.tdwilliamson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsupport.stedwards.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriskportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clipperstartcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cochezycia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitytrustcafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csiselementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icpmasterworkscommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lymi.fund'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b82d7d16100000403004630440220716add38efdac3f4ba6e2e57bd72a70fe5b09e96b5b7b5399dbfa8cf513a31b5022061bbe7ca29e64edba5361305f53cf17c755e7f59d2de358319d49da7195a43500076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b82d7d1670000040300473045022035fb42c21fd7d0f361eefe07dc29820b991a75bf95d072f637e62aeff96f8130022100fb84af5f32eabb1042717efdfba7e9591a8219e62dc7821113f6ff6b33c62894
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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