prod.22.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:99:56:11:18:c7:e2:64:49:02:95:45:ca:86:ca:bb:fa:8f was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.22.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:56:11:18:c7:e2:64:49:02:95:45:ca:86:ca:bb:fa:8f
Serial Number (int): 313514462313482722384468107638175616989839
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:82:c8:ef:b1:6a:6e:09:21:e7:fc:8f:fd:c9:69:44:7e:d9:61:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:7f:92:75:68:b7:d7:0c:0b:74:86:92:46:99:35:32:ba:de:d9:74
Fingerprint (sha256): 7e:ec:31:49:78:c4:9b:a6:e8:cd:d0:91:0c:ee:0e:b5:d6:51:a7:95:4d:ad:bd:66:35:0b:02:b8:fe:b9:c7:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.22.slot.cdn.salesforce-communities.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.22.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aafp.org
app.designschedule.com
beta.dutytocare.info
build.ibotta.com
buyer.trimetisls.com
careers.rosetreesolutions.com
cdn.ap21.blitztesting.com
cdn.na115.blitztesting.com
cdn.radleys.co.uk
clientportal.leap.co.uk
clientportal.leap.com.au
clientportal.leap.us
cliniciansupport.propellerhealth.com
cms.schoolinks.com
coda.wiley.com
cognitiveautomation.aeratechnology.com
community.clickability-test.com.au
community.zaliet.com
conquipcustomers.cqegroup.com
contentcommunity.leaplegalsoftware.com
fans.lightning-seb.com
gs01.designportal.ca
hello.energyaspects.com
help.adra.com
help.leap.co.uk
help.leap.com.au
help.leap.us
help.paramountplus.com
help.stratisiot.net
help.weedmaps.com
help2.marc-goldstein.com
join.shortsale.co
knowledgebase.statsols.com
marketing.westlakeplastics.com
marriott.lifefitness.com
mijn.ditiswijs.nl
mk.marykayintouch.com.ar
mk.marykayintouch.com.br
mk.marykayintouch.com.co
mk.marykayintouch.com.mx
mk.marykayintouch.com.pe
mk.marykayintouch.com.uy
my.shortsalepilot.com
nook.pathfactory.com
pardot.cloudfocusweekly.com
pardot.reseau-selection.com
pardot.selectionretraite.com
pardot.studentleadershipnetwork.org
portal.bwalkrealty.com
portal.wollondilly.nsw.gov.au
prod.22.slot.cdn.salesforce-communities.com
remotesetup.leaplegalsoftware.com
sf.padtinc.com
strategy.rosetreesolutions.com
supplier.trimetisls.com
support.paramountplus.com
supportcenter.webablls.net
vax4nvclinic.nv.gov
wbp.wiley.com
www.1mission.org
www.cloudcompliance.live
www.embraer-eams.com
www.privacy.cloudcompliance.app
www.privacy.plumcloudlabs.com
www3.woodruffsawyer.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.22.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKezCCCWOgAwIBAgISA5lWERjH4mRJApVFyobKu/qPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDYxODIxNDRaFw0yNDAzMDUxODIxNDNaMDYxNDAyBgNVBAMT
K3Byb2QuMjIuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6LKONt976O3+9vaXPFV/qH4R
yNdiruqS3fPuo2kZkO/J64QE5rLMJ9DsnImMHW9q2CV+JV1PFxVcKBo5IjNeJI0o
CxH9nMGY1zJ4g93PumOxOQc+0eyHXRNVcmlsC0raf1v2dD8AlMBDKGVZddXGZ5fJ
+ZzYSel4N3M4+Aqrd/uJbIn6V7PsI/7zh4BZNTH8AXjvcweUz3QoEix3utnG6BJV
NPik2IuYDvWDg3V5rBej6XvKz4jPgAO4Sfse5AMexD3sfhlZFq7+eVu8VPCF0X+t
n1EmclTQ2MPDSFPF8O9eJOs4EOQ3cD8Hbqw5thXguxmPMi7DvocI4e65H0HFAgMB
AAGjggeFMIIHgTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEaCyO+xam4JIef8j/3J
aUR+2WFyMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGfwYDVR0RBIIGdjCCBnKC
DGFwcC5hYWZwLm9yZ4IWYXBwLmRlc2lnbnNjaGVkdWxlLmNvbYIUYmV0YS5kdXR5
dG9jYXJlLmluZm+CEGJ1aWxkLmlib3R0YS5jb22CFGJ1eWVyLnRyaW1ldGlzbHMu
Y29tgh1jYXJlZXJzLnJvc2V0cmVlc29sdXRpb25zLmNvbYIZY2RuLmFwMjEuYmxp
dHp0ZXN0aW5nLmNvbYIaY2RuLm5hMTE1LmJsaXR6dGVzdGluZy5jb22CEWNkbi5y
YWRsZXlzLmNvLnVrghdjbGllbnRwb3J0YWwubGVhcC5jby51a4IYY2xpZW50cG9y
dGFsLmxlYXAuY29tLmF1ghRjbGllbnRwb3J0YWwubGVhcC51c4IkY2xpbmljaWFu
c3VwcG9ydC5wcm9wZWxsZXJoZWFsdGguY29tghJjbXMuc2Nob29saW5rcy5jb22C
DmNvZGEud2lsZXkuY29tgiZjb2duaXRpdmVhdXRvbWF0aW9uLmFlcmF0ZWNobm9s
b2d5LmNvbYIiY29tbXVuaXR5LmNsaWNrYWJpbGl0eS10ZXN0LmNvbS5hdYIUY29t
bXVuaXR5LnphbGlldC5jb22CHWNvbnF1aXBjdXN0b21lcnMuY3FlZ3JvdXAuY29t
giZjb250ZW50Y29tbXVuaXR5LmxlYXBsZWdhbHNvZnR3YXJlLmNvbYIWZmFucy5s
aWdodG5pbmctc2ViLmNvbYIUZ3MwMS5kZXNpZ25wb3J0YWwuY2GCF2hlbGxvLmVu
ZXJneWFzcGVjdHMuY29tgg1oZWxwLmFkcmEuY29tgg9oZWxwLmxlYXAuY28udWuC
EGhlbHAubGVhcC5jb20uYXWCDGhlbHAubGVhcC51c4IWaGVscC5wYXJhbW91bnRw
bHVzLmNvbYITaGVscC5zdHJhdGlzaW90Lm5ldIIRaGVscC53ZWVkbWFwcy5jb22C
GGhlbHAyLm1hcmMtZ29sZHN0ZWluLmNvbYIRam9pbi5zaG9ydHNhbGUuY2+CGmtu
b3dsZWRnZWJhc2Uuc3RhdHNvbHMuY29tgh5tYXJrZXRpbmcud2VzdGxha2VwbGFz
dGljcy5jb22CGG1hcnJpb3R0LmxpZmVmaXRuZXNzLmNvbYIRbWlqbi5kaXRpc3dp
anMubmyCGG1rLm1hcnlrYXlpbnRvdWNoLmNvbS5hcoIYbWsubWFyeWtheWludG91
Y2guY29tLmJyghhtay5tYXJ5a2F5aW50b3VjaC5jb20uY2+CGG1rLm1hcnlrYXlp
bnRvdWNoLmNvbS5teIIYbWsubWFyeWtheWludG91Y2guY29tLnBlghhtay5tYXJ5
a2F5aW50b3VjaC5jb20udXmCFW15LnNob3J0c2FsZXBpbG90LmNvbYIUbm9vay5w
YXRoZmFjdG9yeS5jb22CG3BhcmRvdC5jbG91ZGZvY3Vzd2Vla2x5LmNvbYIbcGFy
ZG90LnJlc2VhdS1zZWxlY3Rpb24uY29tghxwYXJkb3Quc2VsZWN0aW9ucmV0cmFp
dGUuY29tgiNwYXJkb3Quc3R1ZGVudGxlYWRlcnNoaXBuZXR3b3JrLm9yZ4IWcG9y
dGFsLmJ3YWxrcmVhbHR5LmNvbYIdcG9ydGFsLndvbGxvbmRpbGx5Lm5zdy5nb3Yu
YXWCK3Byb2QuMjIuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb22C
IXJlbW90ZXNldHVwLmxlYXBsZWdhbHNvZnR3YXJlLmNvbYIOc2YucGFkdGluYy5j
b22CHnN0cmF0ZWd5LnJvc2V0cmVlc29sdXRpb25zLmNvbYIXc3VwcGxpZXIudHJp
bWV0aXNscy5jb22CGXN1cHBvcnQucGFyYW1vdW50cGx1cy5jb22CGnN1cHBvcnRj
ZW50ZXIud2ViYWJsbHMubmV0ghN2YXg0bnZjbGluaWMubnYuZ292gg13YnAud2ls
ZXkuY29tghB3d3cuMW1pc3Npb24ub3Jnghh3d3cuY2xvdWRjb21wbGlhbmNlLmxp
dmWCFHd3dy5lbWJyYWVyLWVhbXMuY29tgh93d3cucHJpdmFjeS5jbG91ZGNvbXBs
aWFuY2UuYXBwgh13d3cucHJpdmFjeS5wbHVtY2xvdWRsYWJzLmNvbYIXd3d3My53
b29kcnVmZnNhd3llci5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHW
eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGXNyutR4weutaCUGgz2Bx2U
4kldrOVcjR4wWgK+AFmSE5U1tRO0kr3KuSZ6FfbD+iv80O7F3jDmaELLZCL58YQd
6FOxlvUKFd1o5MRteOLULhPLDWGopzbIuuH8Xow2DqniTrqwX7qA1bHjEDPFm07j
g4uPAPq/BLXPLblzkGslSRypgWo7rb8ePIc3T8NzUzx2XX0nJkloNYIBWdOkctkz
eqkbu+nAEwYFm6WKm5VVpJ7Hzf5HUdu55bjapKpXsEq8Osh8Zqttu0KJfuM5asDi
EW1iYcuBxeHerUCuLzP0JszJR9zFzvKuFT3wsIWL0XXy7XwmVrL44OnlSJrZ8A8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+iyjjbfe+jt/vb2lzxV
f6h+EcjXYq7qkt3z7qNpGZDvyeuEBOayzCfQ7JyJjB1vatglfiVdTxcVXCgaOSIz
XiSNKAsR/ZzBmNcyeIPdz7pjsTkHPtHsh10TVXJpbAtK2n9b9nQ/AJTAQyhlWXXV
xmeXyfmc2EnpeDdzOPgKq3f7iWyJ+lez7CP+84eAWTUx/AF473MHlM90KBIsd7rZ
xugSVTT4pNiLmA71g4N1eawXo+l7ys+Iz4ADuEn7HuQDHsQ97H4ZWRau/nlbvFTw
hdF/rZ9RJnJU0NjDw0hTxfDvXiTrOBDkN3A/B26sObYV4LsZjzIuw76HCOHuuR9B
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313514462313482722384468107638175616989839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 18:21:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 18:21:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21701497554520374945137249219680700260420233019313469732755046322374570533025498630428324960347996517283265368857188676932757371790183619869673696221231910269966070444763999751856223356122977064517832885553902712708535713947756904080880810472021374442923462776492848086843556067786339138934551178371974101731755335023311347048758769290685103143622296618532360354043308591384577057068791753927497549705235358618550337319599166561539102076655032039366659944499631922506478300165064776270419011236147554153915961945358773315975246460797828974253483384421540738384966411480806580583626524791931645370478243524672730644933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4682c8efb16a6e0921e7fc8ffdc969447ed96172
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1654 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aafp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.designschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.dutytocare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ibotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyer.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na115.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.radleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniciansupport.propellerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.schoolinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiveautomation.aeratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability-test.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.zaliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquipcustomers.cqegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentcommunity.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fans.lightning-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs01.designportal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.energyaspects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help2.marc-goldstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.shortsale.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.statsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.westlakeplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.lifefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.ditiswijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shortsalepilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nook.pathfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.cloudfocusweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.reseau-selection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.selectionretraite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.studentleadershipnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bwalkrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wollondilly.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesetup.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.padtinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.webablls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vax4nvclinic.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1mission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudcompliance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraer-eams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.cloudcompliance.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.plumcloudlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.woodruffsawyer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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