prod.20.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ae:91:3f:9e:17:93:3a:8b:e4:fa:80:3e:fb:da:30:b2:84 was issued on by Let's Encrypt.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.20.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ae:91:3f:9e:17:93:3a:8b:e4:fa:80:3e:fb:da:30:b2:84
Serial Number (int): 407851343951863709914400560534423979733636
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b2:a7:a2:c6:2f:89:ac:77:a5:d4:dd:bf:9f:bc:77:68:48:c6:d5:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:2f:b8:72:1c:b5:d5:25:8a:b6:ff:96:9a:32:62:39:94:50:e7:21
Fingerprint (sha256): 8b:c8:1f:0f:52:0a:b3:ae:40:ab:b7:61:ac:89:41:d8:c4:91:86:6f:02:02:70:38:e6:9d:59:96:d0:e6:85:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.20.slot.cdn.salesforce-communities.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.20.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acspardot.alliedsvcs.com
bestpractices.myzenkey.com
bestpracticesdev.myzenkey.com
cdn.ap10.blitztesting.com
cdn.na103.blitztesting.com
cdn.na117.blitztesting.com
cdn.na126.blitztesting.com
cdn.na127.blitztesting.com
cdn.na142.blitztesting.com
cdn.na71.blitztesting.com
cdn.na90.blitztesting.com
cms.econsult.net
cms.ementexx.com
cms.hassellstudio.com
cms.omada.net
cms.sfdctk.tk
cms.sterile.com
community.claris.com
community.commonpointqueens.org
community.envisagenow.com
community.newhorizonstas.org.au
content.medicomhealth.com
content.unearthed.greenpeace.org.uk
cp.axa.co.jp
directory.attachmenttraumanetwork.org
dreammn.demandchain.com
emailcdn.wharton.upenn.edu
equipomd.holadr.co
events.tractionondemand.com
feedback.tagesspiegel.de
help.delpha.io
help.elationemr.com
help.makewonder.com
help.salesloft.com
help.smarttrader.com
ic.verallia.net
knowledge.isnetworld.com
m.platinumassoc.com
marketing.avidratings.com
marketing.kirkpatrickprice.net
paciente.holadr.co
pardot.aboutsage.com
pardot.benenden.co.uk
pardot.chromacode.com
pardot.eaglehillconsulting.com
pardot.everylifetechnologies.com
pardot.fallcreeknursery.com
pardot.institutmontaigne.org
pardot.telkonet.com
partners.stardog.com
portalprivacidade.caixaconsorcio.com.br
prod.20.slot.cdn.salesforce-communities.com
reviewers.isnetworld.com
salesforce.fsa.valantic.com
salesforce.oiprocesos.com
salesforce.oomen.group
salesforce.poka.io
salesforce.waltron.net
sf.aro-underwriting.com
sfc.lepide.com
shop.ingredion.us
snatest.blitztesting.com
solve.syntegritygroup.com
support-staging.tangogroup.com
support.claris.com
support.gloo.us
support.myzenkey.com
support.stardog.com
support.tigera.io
testcommunity.fireeye.com
udn.unrealengine.com
www.balasfdc.com
www.busypulse.com
www.logisticscenter.online
www.monxplornet.com
www.mpchaulers.com
www.myxplornet.com
www.platformdemos.com
www.testgecares.com
www3.ecentime.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.20.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM5TCCC82gAwIBAgISBK6RP54XkzqL5PqAPvvaMLKEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMTIwOTIxNTNaFw0yMTA2MTAwOTIxNTNaMDYxNDAyBgNVBAMT
K3Byb2QuMjAuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnC+Cm/WD5zGSva6feFvVT9dd
B2SzWAdooNXfLvI5IAmKJxn/mfPHmNxDU7nFw5GoHE6JiZUBlv/gEnfXULRhX2qQ
OtubeNh1yZ4LDit0Qj1D5KzpFk4/eNskQbXRWcDlka200s9X5CEVJruzgja9blRn
CJvX0cB6L7gpKV0kuUAQXTpliXi6KfG4rJnFgR7VKi/b0c1PSsZLTBVvQj4ETf6r
zJ7atK4cWsGcXzRdW19KXB5svujPR5tJZHDgeq+L5UbzU5xvTVBleo++T5vVQYYB
/X5MIlXDxID1NkSoN9hF6sgN1CP307wBSxzDM6K37geyAOEIo5hmXJSeEBAZAgMB
AAGjggnvMIIJ6zAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLKnosYviax3pdTdv5+8
d2hIxtWnMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIHvgYDVR0RBIIHtTCCB7GC
GGFjc3BhcmRvdC5hbGxpZWRzdmNzLmNvbYIaYmVzdHByYWN0aWNlcy5teXplbmtl
eS5jb22CHWJlc3RwcmFjdGljZXNkZXYubXl6ZW5rZXkuY29tghljZG4uYXAxMC5i
bGl0enRlc3RpbmcuY29tghpjZG4ubmExMDMuYmxpdHp0ZXN0aW5nLmNvbYIaY2Ru
Lm5hMTE3LmJsaXR6dGVzdGluZy5jb22CGmNkbi5uYTEyNi5ibGl0enRlc3Rpbmcu
Y29tghpjZG4ubmExMjcuYmxpdHp0ZXN0aW5nLmNvbYIaY2RuLm5hMTQyLmJsaXR6
dGVzdGluZy5jb22CGWNkbi5uYTcxLmJsaXR6dGVzdGluZy5jb22CGWNkbi5uYTkw
LmJsaXR6dGVzdGluZy5jb22CEGNtcy5lY29uc3VsdC5uZXSCEGNtcy5lbWVudGV4
eC5jb22CFWNtcy5oYXNzZWxsc3R1ZGlvLmNvbYINY21zLm9tYWRhLm5ldIINY21z
LnNmZGN0ay50a4IPY21zLnN0ZXJpbGUuY29tghRjb21tdW5pdHkuY2xhcmlzLmNv
bYIfY29tbXVuaXR5LmNvbW1vbnBvaW50cXVlZW5zLm9yZ4IZY29tbXVuaXR5LmVu
dmlzYWdlbm93LmNvbYIfY29tbXVuaXR5Lm5ld2hvcml6b25zdGFzLm9yZy5hdYIZ
Y29udGVudC5tZWRpY29taGVhbHRoLmNvbYIjY29udGVudC51bmVhcnRoZWQuZ3Jl
ZW5wZWFjZS5vcmcudWuCDGNwLmF4YS5jby5qcIIlZGlyZWN0b3J5LmF0dGFjaG1l
bnR0cmF1bWFuZXR3b3JrLm9yZ4IXZHJlYW1tbi5kZW1hbmRjaGFpbi5jb22CGmVt
YWlsY2RuLndoYXJ0b24udXBlbm4uZWR1ghJlcXVpcG9tZC5ob2xhZHIuY2+CG2V2
ZW50cy50cmFjdGlvbm9uZGVtYW5kLmNvbYIYZmVlZGJhY2sudGFnZXNzcGllZ2Vs
LmRlgg5oZWxwLmRlbHBoYS5pb4ITaGVscC5lbGF0aW9uZW1yLmNvbYITaGVscC5t
YWtld29uZGVyLmNvbYISaGVscC5zYWxlc2xvZnQuY29tghRoZWxwLnNtYXJ0dHJh
ZGVyLmNvbYIPaWMudmVyYWxsaWEubmV0ghhrbm93bGVkZ2UuaXNuZXR3b3JsZC5j
b22CE20ucGxhdGludW1hc3NvYy5jb22CGW1hcmtldGluZy5hdmlkcmF0aW5ncy5j
b22CHm1hcmtldGluZy5raXJrcGF0cmlja3ByaWNlLm5ldIIScGFjaWVudGUuaG9s
YWRyLmNvghRwYXJkb3QuYWJvdXRzYWdlLmNvbYIVcGFyZG90LmJlbmVuZGVuLmNv
LnVrghVwYXJkb3QuY2hyb21hY29kZS5jb22CHnBhcmRvdC5lYWdsZWhpbGxjb25z
dWx0aW5nLmNvbYIgcGFyZG90LmV2ZXJ5bGlmZXRlY2hub2xvZ2llcy5jb22CG3Bh
cmRvdC5mYWxsY3JlZWtudXJzZXJ5LmNvbYIccGFyZG90Lmluc3RpdHV0bW9udGFp
Z25lLm9yZ4ITcGFyZG90LnRlbGtvbmV0LmNvbYIUcGFydG5lcnMuc3RhcmRvZy5j
b22CJ3BvcnRhbHByaXZhY2lkYWRlLmNhaXhhY29uc29yY2lvLmNvbS5icoIrcHJv
ZC4yMC5zbG90LmNkbi5zYWxlc2ZvcmNlLWNvbW11bml0aWVzLmNvbYIYcmV2aWV3
ZXJzLmlzbmV0d29ybGQuY29tghtzYWxlc2ZvcmNlLmZzYS52YWxhbnRpYy5jb22C
GXNhbGVzZm9yY2Uub2lwcm9jZXNvcy5jb22CFnNhbGVzZm9yY2Uub29tZW4uZ3Jv
dXCCEnNhbGVzZm9yY2UucG9rYS5pb4IWc2FsZXNmb3JjZS53YWx0cm9uLm5ldIIX
c2YuYXJvLXVuZGVyd3JpdGluZy5jb22CDnNmYy5sZXBpZGUuY29tghFzaG9wLmlu
Z3JlZGlvbi51c4IYc25hdGVzdC5ibGl0enRlc3RpbmcuY29tghlzb2x2ZS5zeW50
ZWdyaXR5Z3JvdXAuY29tgh5zdXBwb3J0LXN0YWdpbmcudGFuZ29ncm91cC5jb22C
EnN1cHBvcnQuY2xhcmlzLmNvbYIPc3VwcG9ydC5nbG9vLnVzghRzdXBwb3J0Lm15
emVua2V5LmNvbYITc3VwcG9ydC5zdGFyZG9nLmNvbYIRc3VwcG9ydC50aWdlcmEu
aW+CGXRlc3Rjb21tdW5pdHkuZmlyZWV5ZS5jb22CFHVkbi51bnJlYWxlbmdpbmUu
Y29tghB3d3cuYmFsYXNmZGMuY29tghF3d3cuYnVzeXB1bHNlLmNvbYIad3d3Lmxv
Z2lzdGljc2NlbnRlci5vbmxpbmWCE3d3dy5tb254cGxvcm5ldC5jb22CEnd3dy5t
cGNoYXVsZXJzLmNvbYISd3d3Lm15eHBsb3JuZXQuY29tghV3d3cucGxhdGZvcm1k
ZW1vcy5jb22CE3d3dy50ZXN0Z2VjYXJlcy5jb22CEXd3dzMuZWNlbnRpbWUuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHYAlCC8Ho7VjWyIcx+CiyIsDdHaTV5sT5Q9YdtOL1hNosIAAAF4JfTz
TAAABAMARzBFAiBJqwI/Le6zejvTZXheJYoX5w8WV88FpQSRx1aqYkMihQIhANSB
g/+j0L3sTgcgd5VR5zKqoe8RBTReva93FZhrGUNRAHUA9lyUL9F3MCIUVBgIMJRW
juNNExkzv98MLyALzE7xZOMAAAF4JfTzQwAABAMARjBEAiASJxsf8bMdpZNWm1/V
pbp8Z0zLH1TrqIWuwdo7nshZCwIgDhnFT/SX8dqLd+rWK2Aah299gNwHoXP08I24
I2/Z58cwDQYJKoZIhvcNAQELBQADggEBAKErwRGUT9kbP3NEaS0dbPXjHU8zcg30
vDB3ywsT+Qryq3JqpLPHZQRYmqPk6xJMiE8ZwpSfMi9PKLfrSt1k8gFmC9XaRxnJ
E0p1W5zDKZJOT2+vwYWrlbQbux7rmTdAAYJs3MguZAouTjFnbIybGR0X86dNUnly
yb73HY7HJo7gdjGjOwOWVVT3mzcm8AtwKZxrZfztUxboXZMMpe0FFED7OCzTIy7e
NQ13KeCkwwPhMXc7fA/SKH2k0zS3JVwooFD//zagM4jgL/xh8TwGz1VCCiylmXYf
xywxyBGuXSqyy1eJfzhwIsiG9b+4f9oEpUYfYLTZ7t3x+IIBR2km1R8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypwvgpv1g+cxkr2un3hb
1U/XXQdks1gHaKDV3y7yOSAJiicZ/5nzx5jcQ1O5xcORqBxOiYmVAZb/4BJ311C0
YV9qkDrbm3jYdcmeCw4rdEI9Q+Ss6RZOP3jbJEG10VnA5ZGttNLPV+QhFSa7s4I2
vW5UZwib19HAei+4KSldJLlAEF06ZYl4uinxuKyZxYEe1Sov29HNT0rGS0wVb0I+
BE3+q8ye2rSuHFrBnF80XVtfSlwebL7oz0ebSWRw4Hqvi+VG81Ocb01QZXqPvk+b
1UGGAf1+TCJVw8SA9TZEqDfYRerIDdQj99O8AUscwzOit+4HsgDhCKOYZlyUnhAQ
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407851343951863709914400560534423979733636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-12 09:21:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-10 09:21:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25577155586439469798326945269298555967167877827346709248844278760017011268205122205459326516748437580035147420225799503220006288697617035884231647316791811149674428799325396158632880627043351409117242384070654716317037472927438498177608080981494895042058677112358643767998527229799129031387716127043087848987538624449610079571731235360077357190543294242750785237435363607273211328123392164885164110462414487593245819507849019013045532307852062136767895306574906040813047714275193892437485077100319713656684840188644790413640447039380582011075019886323558083256221717976077546198623684797228917319475045658642130931737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2a7a2c62f89ac77a5d4ddbf9fbc776848c6d5a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1973 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acspardot.alliedsvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpractices.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpracticesdev.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap10.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na103.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na117.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na126.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na127.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na142.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na71.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na90.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.econsult.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ementexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.hassellstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.omada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sfdctk.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sterile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.commonpointqueens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.envisagenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.newhorizonstas.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.medicomhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.unearthed.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.axa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.attachmenttraumanetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreammn.demandchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcdn.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipomd.holadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.tractionondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.tagesspiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.delpha.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.elationemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.makewonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.salesloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.smarttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic.verallia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.platinumassoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.avidratings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.kirkpatrickprice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciente.holadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.aboutsage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.benenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.chromacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eaglehillconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.everylifetechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.fallcreeknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.institutmontaigne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.telkonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprivacidade.caixaconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewers.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.fsa.valantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oiprocesos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oomen.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.poka.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.waltron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.aro-underwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.lepide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ingredion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snatest.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solve.syntegritygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-staging.tangogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.gloo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tigera.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcommunity.fireeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udn.unrealengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balasfdc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.busypulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticscenter.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpchaulers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformdemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testgecares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.ecentime.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017825f4f34c0000040300473045022049ab023f2deeb37a3bd365785e258a17e70f1657cf05a50491c756aa62432285022100d48183ffa3d0bdec4e0720779551e732aaa1ef1105345ebdaf7715986b194351007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017825f4f3430000040300463044022012271b1ff1b31da593569b5fd5a5ba7c674ccb1f54eba885aec1da3b9ec8590b02200e19c54ff497f1da8b77ead62b601a876f7d80dc07a173f4f08db8236fd9e7c7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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