prod.22.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 04:89:ce:98:1d:97:ad:d5:df:d8:aa:b0:2a:f9:8b:4e:23:69 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.22.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:ce:98:1d:97:ad:d5:df:d8:aa:b0:2a:f9:8b:4e:23:69
Serial Number (int): 395342438791670876555131189779827476276073
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:57:3e:a4:8b:b0:8a:46:ba:c0:39:4d:89:01:33:2c:ee:74:d2:cf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:ee:86:41:1f:30:27:32:01:b8:ec:2f:0c:3c:3b:3c:fd:a0:00:fa
Fingerprint (sha256): ae:9e:28:4a:6b:13:ef:26:e0:9a:d7:c0:a3:a6:75:62:15:d8:b9:e7:42:76:2a:9a:a5:99:51:80:1a:53:3d:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.22.slot.cdn.salesforce-communities.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.22.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aafp.org
app.designschedule.com
beta.dutytocare.info
billinghelp.datto.com
build.ibotta.com
buyer.trimetisls.com
careers.rosetreesolutions.com
cdn.ap21.blitztesting.com
cdn.na115.blitztesting.com
cdn.radleys.co.uk
clientportal.leap.co.uk
clientportal.leap.com.au
clientportal.leap.us
cliniciansupport.propellerhealth.com
cms.schoolinks.com
coda.wiley.com
cognitiveautomation.aeratechnology.com
community.clickability-test.com.au
community.clickability.com.au
community.flexischools.com.au
community.zaliet.com
conquipcustomers.cqegroup.com
content.opencorporates.com
contentcommunity.leaplegalsoftware.com
everydayfaith.churchofengland.org
fans.lightning-seb.com
faq.fair.com
gs01.designportal.ca
hello.energyaspects.com
help.adra.com
help.datto.com
help.leap.co.uk
help.leap.com.au
help.leap.us
help.paramountplus.com
help.stratisiot.net
help.weedmaps.com
help2.marc-goldstein.com
join.shortsale.co
knowledgebase.statsols.com
marketing.westlakeplastics.com
marriott.lifefitness.com
mijn.ditiswijs.nl
mk.marykayintouch.com.ar
mk.marykayintouch.com.br
mk.marykayintouch.com.co
mk.marykayintouch.com.mx
mk.marykayintouch.com.pe
mk.marykayintouch.com.uy
my.shortsalepilot.com
nook.pathfactory.com
pardot.cloudfocusweekly.com
pardot.reseau-selection.com
pardot.selectionretraite.com
pardot.studentleadershipnetwork.org
partners.magmutual.com
portal.bwalkrealty.com
portal.wollondilly.nsw.gov.au
prod.22.slot.cdn.salesforce-communities.com
remotesetup.leaplegalsoftware.com
sf.padtinc.com
strategy.rosetreesolutions.com
supplier.trimetisls.com
support.paramountplus.com
supportcenter.webablls.net
test1.lookingonward.com
vax4nvclinic.nv.gov
vkgs0shared.blitztesting.com
wbp-admin.wiley.com
wbp.wiley.com
www.1mission.org
www.cloudcompliance.live
www.datto.help
www.embraer-eams.com
www.hcp.meadjohnson.com
www.privacy.cloudcompliance.app
www.privacy.plumcloudlabs.com
www.sampling.meadjohnson.com
www3.woodruffsawyer.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.22.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINAzCCC+ugAwIBAgISBInOmB2XrdXf2KqwKvmLTiNpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTEwMDcwODA5MjhaFw0yMjAxMDUwODA5MjdaMDYxNDAyBgNVBAMT
K3Byb2QuMjIuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzgss6TybgKeQBh/qTmqzY2hh
JNry3QJy0Y0GrPUDk3vATdQiPTtBtMiwwzM+w+bf3yfwR/4rHIdl2zrkWBw6y6aK
4ylR/bjhVjEGRewv9MghxP4AdihNV/Dn+K1ZVA6/fekq/rVUXEm3l6STtgjlZlHK
CkO1kuiewgHHOcXoVQcmQ93WSukTP/jo+d8toFrkpInwom54+rtDNCXX2qSK6DEu
v9obeMGlFAeHIi/vtrLiSxpZ0tK8lLwHklDpoE2yobXg6kirX3AVUHv2XjZF1/Ai
DvJXncuPWdCu72FoizX+BPE3loXKtYql+BnIq+Ae2v1kc4X5YAH7NIoUfhRXAgMB
AAGjggoNMIIKCTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNRXPqSLsIpGusA5TYkB
MyzudNLPMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIH3AYDVR0RBIIH0zCCB8+C
DGFwcC5hYWZwLm9yZ4IWYXBwLmRlc2lnbnNjaGVkdWxlLmNvbYIUYmV0YS5kdXR5
dG9jYXJlLmluZm+CFWJpbGxpbmdoZWxwLmRhdHRvLmNvbYIQYnVpbGQuaWJvdHRh
LmNvbYIUYnV5ZXIudHJpbWV0aXNscy5jb22CHWNhcmVlcnMucm9zZXRyZWVzb2x1
dGlvbnMuY29tghljZG4uYXAyMS5ibGl0enRlc3RpbmcuY29tghpjZG4ubmExMTUu
YmxpdHp0ZXN0aW5nLmNvbYIRY2RuLnJhZGxleXMuY28udWuCF2NsaWVudHBvcnRh
bC5sZWFwLmNvLnVrghhjbGllbnRwb3J0YWwubGVhcC5jb20uYXWCFGNsaWVudHBv
cnRhbC5sZWFwLnVzgiRjbGluaWNpYW5zdXBwb3J0LnByb3BlbGxlcmhlYWx0aC5j
b22CEmNtcy5zY2hvb2xpbmtzLmNvbYIOY29kYS53aWxleS5jb22CJmNvZ25pdGl2
ZWF1dG9tYXRpb24uYWVyYXRlY2hub2xvZ3kuY29tgiJjb21tdW5pdHkuY2xpY2th
YmlsaXR5LXRlc3QuY29tLmF1gh1jb21tdW5pdHkuY2xpY2thYmlsaXR5LmNvbS5h
dYIdY29tbXVuaXR5LmZsZXhpc2Nob29scy5jb20uYXWCFGNvbW11bml0eS56YWxp
ZXQuY29tgh1jb25xdWlwY3VzdG9tZXJzLmNxZWdyb3VwLmNvbYIaY29udGVudC5v
cGVuY29ycG9yYXRlcy5jb22CJmNvbnRlbnRjb21tdW5pdHkubGVhcGxlZ2Fsc29m
dHdhcmUuY29tgiFldmVyeWRheWZhaXRoLmNodXJjaG9mZW5nbGFuZC5vcmeCFmZh
bnMubGlnaHRuaW5nLXNlYi5jb22CDGZhcS5mYWlyLmNvbYIUZ3MwMS5kZXNpZ25w
b3J0YWwuY2GCF2hlbGxvLmVuZXJneWFzcGVjdHMuY29tgg1oZWxwLmFkcmEuY29t
gg5oZWxwLmRhdHRvLmNvbYIPaGVscC5sZWFwLmNvLnVrghBoZWxwLmxlYXAuY29t
LmF1ggxoZWxwLmxlYXAudXOCFmhlbHAucGFyYW1vdW50cGx1cy5jb22CE2hlbHAu
c3RyYXRpc2lvdC5uZXSCEWhlbHAud2VlZG1hcHMuY29tghhoZWxwMi5tYXJjLWdv
bGRzdGVpbi5jb22CEWpvaW4uc2hvcnRzYWxlLmNvghprbm93bGVkZ2ViYXNlLnN0
YXRzb2xzLmNvbYIebWFya2V0aW5nLndlc3RsYWtlcGxhc3RpY3MuY29tghhtYXJy
aW90dC5saWZlZml0bmVzcy5jb22CEW1pam4uZGl0aXN3aWpzLm5sghhtay5tYXJ5
a2F5aW50b3VjaC5jb20uYXKCGG1rLm1hcnlrYXlpbnRvdWNoLmNvbS5icoIYbWsu
bWFyeWtheWludG91Y2guY29tLmNvghhtay5tYXJ5a2F5aW50b3VjaC5jb20ubXiC
GG1rLm1hcnlrYXlpbnRvdWNoLmNvbS5wZYIYbWsubWFyeWtheWludG91Y2guY29t
LnV5ghVteS5zaG9ydHNhbGVwaWxvdC5jb22CFG5vb2sucGF0aGZhY3RvcnkuY29t
ghtwYXJkb3QuY2xvdWRmb2N1c3dlZWtseS5jb22CG3BhcmRvdC5yZXNlYXUtc2Vs
ZWN0aW9uLmNvbYIccGFyZG90LnNlbGVjdGlvbnJldHJhaXRlLmNvbYIjcGFyZG90
LnN0dWRlbnRsZWFkZXJzaGlwbmV0d29yay5vcmeCFnBhcnRuZXJzLm1hZ211dHVh
bC5jb22CFnBvcnRhbC5id2Fsa3JlYWx0eS5jb22CHXBvcnRhbC53b2xsb25kaWxs
eS5uc3cuZ292LmF1gitwcm9kLjIyLnNsb3QuY2RuLnNhbGVzZm9yY2UtY29tbXVu
aXRpZXMuY29tgiFyZW1vdGVzZXR1cC5sZWFwbGVnYWxzb2Z0d2FyZS5jb22CDnNm
LnBhZHRpbmMuY29tgh5zdHJhdGVneS5yb3NldHJlZXNvbHV0aW9ucy5jb22CF3N1
cHBsaWVyLnRyaW1ldGlzbHMuY29tghlzdXBwb3J0LnBhcmFtb3VudHBsdXMuY29t
ghpzdXBwb3J0Y2VudGVyLndlYmFibGxzLm5ldIIXdGVzdDEubG9va2luZ29ud2Fy
ZC5jb22CE3ZheDRudmNsaW5pYy5udi5nb3aCHHZrZ3Mwc2hhcmVkLmJsaXR6dGVz
dGluZy5jb22CE3dicC1hZG1pbi53aWxleS5jb22CDXdicC53aWxleS5jb22CEHd3
dy4xbWlzc2lvbi5vcmeCGHd3dy5jbG91ZGNvbXBsaWFuY2UubGl2ZYIOd3d3LmRh
dHRvLmhlbHCCFHd3dy5lbWJyYWVyLWVhbXMuY29tghd3d3cuaGNwLm1lYWRqb2hu
c29uLmNvbYIfd3d3LnByaXZhY3kuY2xvdWRjb21wbGlhbmNlLmFwcIIdd3d3LnBy
aXZhY3kucGx1bWNsb3VkbGFicy5jb22CHHd3dy5zYW1wbGluZy5tZWFkam9obnNv
bi5jb22CF3d3dzMud29vZHJ1ZmZzYXd5ZXIuY29tMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAQcjKsd8iRkoQ
xqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF8WgPCUQAABAMARjBEAiAbUkGCY6o9
0/SvteISMXK50w27qwbeWl9XeHKTz9qVsgIgG823/syTM7QvZiSBThj4CjrshGcA
3nPCrVp/GCwpd4gAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAA
AXxaA8KAAAAEAwBHMEUCIE0mYEpx3B2oA7HvYrzwUSO3+jXSDQhbgeYPExcq584m
AiEA2hdJt2ISOA6jBWMsrpTanWo83RlM39s/FpMMO/cE5o0wDQYJKoZIhvcNAQEL
BQADggEBADee2CrirasDyjK/XWjY1nGLlVFdXkzDEHkPajZ62HkKdNCU6xh0RRvI
ytzmnbtWueaHQIHPAjsNqOsix9BVU37Y35wUsHfTz80u4jba+3Ck6IbLFqzv9Ijq
XeQAvfpl+PKlLyrLqWoqz2Pis1/lHCZN6uS1/mvV77gxxs5ZxQ5qfN4/iz61hGyS
iPCD7H/+igYwLEaMFaOR9U5lRJL7I/oc1B/QZVt365JP1IHlw2aUnB3VgHcSGh62
Y/7HnDhoA1Gj/DIO7/M9j90cKAUFt7x9hGPm+Defa8pgsws/rXBLZrF/CR2eKpb8
o6H003HzdNeGlafueZpmUDrGJP1tpsw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c4LLOk8m4CnkAYf6k5q
s2NoYSTa8t0CctGNBqz1A5N7wE3UIj07QbTIsMMzPsPm398n8Ef+KxyHZds65Fgc
OsumiuMpUf244VYxBkXsL/TIIcT+AHYoTVfw5/itWVQOv33pKv61VFxJt5ekk7YI
5WZRygpDtZLonsIBxznF6FUHJkPd1krpEz/46PnfLaBa5KSJ8KJuePq7QzQl19qk
iugxLr/aG3jBpRQHhyIv77ay4ksaWdLSvJS8B5JQ6aBNsqG14OpIq19wFVB79l42
RdfwIg7yV53Lj1nQru9haIs1/gTxN5aFyrWKpfgZyKvgHtr9ZHOF+WAB+zSKFH4U
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395342438791670876555131189779827476276073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-07 08:09:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-05 08:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28505222529999362015614461138071130983888383252644304358932724708411645311897828497821160674323349041831107305033504686729415399039181797998569092172429848904890439921786274677661382259505388157558970459251442980380874414835107420723184516052090785080028155346139572648885771798334048565167174628137236949106488258402169791945200555804061378933978196368685723588691109745708307043410502150488511880246383363266883826806109026191228052612331353805354126701802539558416476844206669691384106970778571842424502585774120244989403391819526595388379102996718352254677311726150398697203265411638964205375476696677061622633559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4573ea48bb08a46bac0394d8901332cee74d2cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2003 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aafp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.designschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.dutytocare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinghelp.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ibotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyer.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na115.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.radleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniciansupport.propellerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.schoolinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiveautomation.aeratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability-test.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.flexischools.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.zaliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquipcustomers.cqegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.opencorporates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentcommunity.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everydayfaith.churchofengland.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fans.lightning-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.fair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs01.designportal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.energyaspects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help2.marc-goldstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.shortsale.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.statsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.westlakeplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.lifefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.ditiswijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shortsalepilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nook.pathfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.cloudfocusweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.reseau-selection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.selectionretraite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.studentleadershipnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.magmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bwalkrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wollondilly.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesetup.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.padtinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.webablls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.lookingonward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vax4nvclinic.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vkgs0shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp-admin.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1mission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudcompliance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datto.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraer-eams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcp.meadjohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.cloudcompliance.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.plumcloudlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sampling.meadjohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.woodruffsawyer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c5a03c251000004030046304402201b52418263aa3dd3f4afb5e2123172b9d30dbbab06de5a5f57787293cfda95b202201bcdb7fecc9333b42f6624814e18f80a3aec846700de73c2ad5a7f182c29778800760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c5a03c280000004030047304502204d26604a71dc1da803b1ef62bcf05123b7fa35d20d085b81e60f13172ae7ce26022100da1749b76212380ea305632cae94da9d6a3cdd194cdfdb3f16930c3bf704e68d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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