prod.20.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:86:dc:a0:6e:91:73:ce:a2:63:0d:e5:3f:99:3f:27:c4 was issued on by Let's Encrypt.

With 74 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.20.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:86:dc:a0:6e:91:73:ce:a2:63:0d:e5:3f:99:3f:27:c4
Serial Number (int): 421108549991890585482774477556671127168964
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:21:06:50:a9:9d:bd:df:3b:df:8e:48:b9:f0:f4:fd:ec:17:87:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:72:5d:c5:a3:4d:21:a0:bb:b5:6e:4d:54:e3:81:fe:94:7e:0f:ab
Fingerprint (sha256): 96:72:52:18:83:7d:a1:f2:ad:ad:d5:7b:73:f9:49:cc:47:dd:d9:15:cd:b2:85:15:12:47:cf:bf:b3:5b:11:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.20.slot.cdn.salesforce-communities.com

74

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.20.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acspardot.alliedsvcs.com
aide.soquij.qc.ca
bestpractices.myzenkey.com
bestpracticesdev.myzenkey.com
cdn.ap10.blitztesting.com
cdn.na103.blitztesting.com
cdn.na117.blitztesting.com
cdn.na126.blitztesting.com
cdn.na127.blitztesting.com
cdn.na142.blitztesting.com
cdn.na71.blitztesting.com
cdn.na90.blitztesting.com
cms.econsult.net
cms.ementexx.com
cms.hassellstudio.com
cms.sterile.com
community.claris.com
community.commonpointqueens.org
community.envisagenow.com
community.newhorizonstas.org.au
content.persax.es
content.unearthed.greenpeace.org.uk
cp.axa.co.jp
directory.attachmenttraumanetwork.org
dreammn.demandchain.com
emailcdn.wharton.upenn.edu
equipomd.holadr.co
events.tractionondemand.com
help.delpha.io
help.elationemr.com
help.makewonder.com
help.salesloft.com
ic.verallia.net
knowledge.isnetworld.com
marketing.kirkpatrickprice.net
marketinglive.cedre.info
paciente.holadr.co
pardot.aboutsage.com
pardot.benenden.co.uk
pardot.chromacode.com
pardot.colonialbus.com
pardot.eaglehillconsulting.com
pardot.everylifetechnologies.com
pardot.fallcreeknursery.com
pardot.institutmontaigne.org
pardot.telkonet.com
partners.stardog.com
portalprivacidade.caixaconsorcio.com.br
prod.20.slot.cdn.salesforce-communities.com
reviewers.isnetworld.com
salesforce.fsa.valantic.com
salesforce.oiprocesos.com
salesforce.oomen.group
salesforce.poka.io
salesforce.waltron.net
sf.aro-underwriting.com
sfc.lepide.com
shop.ingredion.us
snatest.blitztesting.com
solve.syntegritygroup.com
support-staging.tangogroup.com
support.claris.com
support.myzenkey.com
support.stardog.com
support.tigera.io
support.unifyordering.com
testcommunity.fireeye.com
udn.unrealengine.com
www.logisticscenter.online
www.monxplornet.com
www.mpchaulers.com
www.myxplornet.com
www.platformdemos.com
www3.ecentime.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.20.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9BqWHUIKQOf+RuRO7Qr
uWvyt+iSq+84J7p4tONya2Alcv74Quui35h0kpMhocytwPotBZkH46YmsnRjyQZg
XYhYLzWiYlFX2kGWJ/F30+K+2XXNqBX/nfo0oLKihZETiYdz4in1RJimDBq81uRB
BGxZK49UiUqfp+VCrcmNqbY5BtFPvtVzez0mal2e3vWxqUfAzwaeodlyQMThMvtN
0sEN0lB6snDPCH+mc6uGJ5sfO1GAs8XWFThoKP/W/ZxCb7I3MdcJinna6QNitKI+
en81CXb9nnCgaE7HYSGa+u4B87xvYOzjYYognF3SPlR7uvISWj6LpD3rHdNX6R3V
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421108549991890585482774477556671127168964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 07:38:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 07:38:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25224196158445377951056533064467125848432183446500817446518670902879892308491407301550449394011652239707052917993977687360544883079078363092845386584659539480629018420163810793402532541482595888099888393951782136637604333731568468556389661835056307470511106587836772292715700681602124220883165604825215590286067115114270843417303016338744764887476266128879384397245456990480338346419085389426465867096915887763055227713606535674337378387680530090985363838918232879529281903588351445447090548162241221447321914260742802926250306907929758259342225868761451083666487754392831377867969079882782225966038521626910464529713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1210650a99dbddf3bdf8e48b9f0f4fdec178757
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acspardot.alliedsvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aide.soquij.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpractices.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestpracticesdev.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap10.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na103.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na117.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na126.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na127.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na142.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na71.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na90.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.econsult.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.ementexx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.hassellstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sterile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.commonpointqueens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.envisagenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.newhorizonstas.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.persax.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.unearthed.greenpeace.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.axa.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directory.attachmenttraumanetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreammn.demandchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailcdn.wharton.upenn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equipomd.holadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.tractionondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.delpha.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.elationemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.makewonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.salesloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ic.verallia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.kirkpatrickprice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketinglive.cedre.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paciente.holadr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.aboutsage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.benenden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.chromacode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.colonialbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.eaglehillconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.everylifetechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.fallcreeknursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.institutmontaigne.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.telkonet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalprivacidade.caixaconsorcio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.20.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewers.isnetworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.fsa.valantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oiprocesos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.oomen.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.poka.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.waltron.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.aro-underwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfc.lepide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.ingredion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snatest.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solve.syntegritygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-staging.tangogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.claris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.myzenkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.stardog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.tigera.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.unifyordering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcommunity.fireeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udn.unrealengine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logisticscenter.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpchaulers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myxplornet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.platformdemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.ecentime.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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