prod.30.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:e6:f5:67:f7:07:bf:ed:c7:7e:d8:f1:45:58:25:c4:06 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod.30.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:2a:e6:f5:67:f7:07:bf:ed:c7:7e:d8:f1:45:58:25:c4:06
Serial Number (int): 275935713866380970828796837308521068741638
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:ad:17:58:46:d6:3f:5f:f7:05:4a:bd:c5:1f:eb:4a:80:14:69:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:fc:7b:35:10:20:c6:6e:f6:a7:02:4d:5d:02:c9:39:4d:ac:25:d9
Fingerprint (sha256): d6:34:54:75:26:29:f4:56:af:fb:67:86:a7:83:23:d1:1e:fd:80:2e:78:45:a1:55:36:53:39:32:55:5e:81:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.30.slot.cdn.salesforce-communities.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.30.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.tractionenable.com
application.internationalstudents.sa.edu.au
apply.aum.edu.mt
assets.lefebvre-sarrut.be
careers.tractionondemand.com
cdn.ap0.blitztesting.com
cdn.eu27.blitztesting.com
cdn.na133.blitztesting.com
checkout.aakonsult.com
cms.am.lombardodier.com
cms.centralpharma.com
cms.wolfvision.com
community.clarabridge.com
community.ipc.org.cn
community.skillsoft.com
email.1spatial.com
empresa.cochezycia.com
enable.tractionondemand.com
faq.guerlain.com
faq.virbac-services.jp
feedback.driveconnect.me
help.doterra.com
helpme.englishlive.ef.com
knowledge.doterra.net
knowledgebase.doterra.net
loans.santanderbank.com
locator.bodyshotcigars.com
med.nutramigen.pl
members.eusophia.net
mk.marykayintouch.co.nz
mk.marykayintouch.com.au
mk.marykayintouch.com.hk
mk.marykayintouch.com.my
mk.marykayintouch.com.ph
mk.marykayintouch.com.sg
mk.marykayintouch.com.tw
my.circles-concierge.co.uk
pardot.americanretire.com
pardot.fullsupportgroup.com
partner.roampayments.com
pay.roampayments.com
podpora.crmproneziskovky.cz
portal.tractionpropel.com
preferences.doterra.com
prod.30.slot.cdn.salesforce-communities.com
retail.walpoleoutdoors.com
salesforce.algebris.com
scpbd.scp-health.com
sf.jobtread.com
sfcms.authentic4d.com
silverclub.doterra.com
sub.ajc-dev.com
success.bacasystems.com
supportcenter.clarabridge.com
workx.bysodexo.nl
www.cmfinanciera.com
www.conectabat.com
www.lojamosaicco.com.br
www.noisesolution.org
www.partnercollaboration.siemens.com
www.partnerfinder.automation.siemens.com
www.partnerfinder.automation.siemens.de
www.ruralhealthpro.org
www.steamboatmeal.com
www3.oxlin.io

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.30.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILfjCCCmagAwIBAgISAyrm9Wf3B7/tx37Y8UVYJcQGMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MjQwODMyNTJaFw0yNDA3MjMwODMyNTFaMDYxNDAyBgNVBAMT
K3Byb2QuMzAuc2xvdC5jZG4uc2FsZXNmb3JjZS1jb21tdW5pdGllcy5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kTWoEp9Txi2oi7JEZ/crUeVm
CS0qoM55zo0ykBxyzrW2MbBxD3Vb9TbIQR5Xqq8Z/NHhUJkhO0B9zZcofsx0dud3
so7avyIyFD0CTg6z7S3NoyHN3nOCkM/drC3omM4xMBBNRfeDI2Rao9afMGvf9mOB
oN37cls/TbhxfDPgRzuSgb+mv5hUvxk3/UAnZu342QDfuYA7iYaP/eNwVwdoSLL9
dKay3DDn9RbVLFbs3YVzw1RkJMAZWE28BDauhgdnSlmTYNj7F/XjwjK0otaKb8oG
Ntkzlq1TVFHWMxQvuIAxEVudS3R0yIFQT31NMucVoKwDrLE7g8VOsRgBjTcLAgMB
AAGjggiIMIIIhDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFH6tF1hG1j9f9wVKvcUf
60qAFGkNMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUF
BwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsG
AQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIGjQYDVR0RBIIGhDCCBoCC
FmFwcC50cmFjdGlvbmVuYWJsZS5jb22CK2FwcGxpY2F0aW9uLmludGVybmF0aW9u
YWxzdHVkZW50cy5zYS5lZHUuYXWCEGFwcGx5LmF1bS5lZHUubXSCGWFzc2V0cy5s
ZWZlYnZyZS1zYXJydXQuYmWCHGNhcmVlcnMudHJhY3Rpb25vbmRlbWFuZC5jb22C
GGNkbi5hcDAuYmxpdHp0ZXN0aW5nLmNvbYIZY2RuLmV1MjcuYmxpdHp0ZXN0aW5n
LmNvbYIaY2RuLm5hMTMzLmJsaXR6dGVzdGluZy5jb22CFmNoZWNrb3V0LmFha29u
c3VsdC5jb22CF2Ntcy5hbS5sb21iYXJkb2RpZXIuY29tghVjbXMuY2VudHJhbHBo
YXJtYS5jb22CEmNtcy53b2xmdmlzaW9uLmNvbYIZY29tbXVuaXR5LmNsYXJhYnJp
ZGdlLmNvbYIUY29tbXVuaXR5LmlwYy5vcmcuY26CF2NvbW11bml0eS5za2lsbHNv
ZnQuY29tghJlbWFpbC4xc3BhdGlhbC5jb22CFmVtcHJlc2EuY29jaGV6eWNpYS5j
b22CG2VuYWJsZS50cmFjdGlvbm9uZGVtYW5kLmNvbYIQZmFxLmd1ZXJsYWluLmNv
bYIWZmFxLnZpcmJhYy1zZXJ2aWNlcy5qcIIYZmVlZGJhY2suZHJpdmVjb25uZWN0
Lm1lghBoZWxwLmRvdGVycmEuY29tghloZWxwbWUuZW5nbGlzaGxpdmUuZWYuY29t
ghVrbm93bGVkZ2UuZG90ZXJyYS5uZXSCGWtub3dsZWRnZWJhc2UuZG90ZXJyYS5u
ZXSCF2xvYW5zLnNhbnRhbmRlcmJhbmsuY29tghpsb2NhdG9yLmJvZHlzaG90Y2ln
YXJzLmNvbYIRbWVkLm51dHJhbWlnZW4ucGyCFG1lbWJlcnMuZXVzb3BoaWEubmV0
ghdtay5tYXJ5a2F5aW50b3VjaC5jby5ueoIYbWsubWFyeWtheWludG91Y2guY29t
LmF1ghhtay5tYXJ5a2F5aW50b3VjaC5jb20uaGuCGG1rLm1hcnlrYXlpbnRvdWNo
LmNvbS5teYIYbWsubWFyeWtheWludG91Y2guY29tLnBoghhtay5tYXJ5a2F5aW50
b3VjaC5jb20uc2eCGG1rLm1hcnlrYXlpbnRvdWNoLmNvbS50d4IabXkuY2lyY2xl
cy1jb25jaWVyZ2UuY28udWuCGXBhcmRvdC5hbWVyaWNhbnJldGlyZS5jb22CG3Bh
cmRvdC5mdWxsc3VwcG9ydGdyb3VwLmNvbYIYcGFydG5lci5yb2FtcGF5bWVudHMu
Y29tghRwYXkucm9hbXBheW1lbnRzLmNvbYIbcG9kcG9yYS5jcm1wcm9uZXppc2tv
dmt5LmN6ghlwb3J0YWwudHJhY3Rpb25wcm9wZWwuY29tghdwcmVmZXJlbmNlcy5k
b3RlcnJhLmNvbYIrcHJvZC4zMC5zbG90LmNkbi5zYWxlc2ZvcmNlLWNvbW11bml0
aWVzLmNvbYIacmV0YWlsLndhbHBvbGVvdXRkb29ycy5jb22CF3NhbGVzZm9yY2Uu
YWxnZWJyaXMuY29tghRzY3BiZC5zY3AtaGVhbHRoLmNvbYIPc2Yuam9idHJlYWQu
Y29tghVzZmNtcy5hdXRoZW50aWM0ZC5jb22CFnNpbHZlcmNsdWIuZG90ZXJyYS5j
b22CD3N1Yi5hamMtZGV2LmNvbYIXc3VjY2Vzcy5iYWNhc3lzdGVtcy5jb22CHXN1
cHBvcnRjZW50ZXIuY2xhcmFicmlkZ2UuY29tghF3b3JreC5ieXNvZGV4by5ubIIU
d3d3LmNtZmluYW5jaWVyYS5jb22CEnd3dy5jb25lY3RhYmF0LmNvbYIXd3d3Lmxv
amFtb3NhaWNjby5jb20uYnKCFXd3dy5ub2lzZXNvbHV0aW9uLm9yZ4Ikd3d3LnBh
cnRuZXJjb2xsYWJvcmF0aW9uLnNpZW1lbnMuY29tgih3d3cucGFydG5lcmZpbmRl
ci5hdXRvbWF0aW9uLnNpZW1lbnMuY29tgid3d3cucGFydG5lcmZpbmRlci5hdXRv
bWF0aW9uLnNpZW1lbnMuZGWCFnd3dy5ydXJhbGhlYWx0aHByby5vcmeCFXd3dy5z
dGVhbWJvYXRtZWFsLmNvbYINd3d3My5veGxpbi5pbzATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABjw9zZgYAAAQDAEgwRgIhAMVtj4+odt5x3cTFr8Uv
TtiqMzqzOss2zFhgg7J/zqFcAiEAiUY67abiT0lju4y5gw8y566AfLYxFk/0pODi
8xBHJnQAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY8Pc2YO
AAAEAwBIMEYCIQCS7PpNorW6TXU6usHcbxjeBnh4yPTVfa8NaEyy6MxZlgIhANyP
GS0OjvUe93jpul+aNL4Ms9sXbHXIWWQH5pbqyYVwMA0GCSqGSIb3DQEBCwUAA4IB
AQCWc0oJCKZ2NK7mL46IIlTq854suIyZzckgpPMPK28acy0m/v7UZ6iNozD8V3zo
gjRsvUqupNrTXwzp2CxOynPgk8Q13LDYTn3Z0l4qVlyROAVvn7ShJyBZBdGEJ/fM
aC/H5hMOy4wgucxGQdbuoy/9qo7yv+GSHMiJv6wPc+g4L0T+NpMwScFTwu10h3IL
dzyE0DGC2zNTVRTTg31tDQAAoQpS1IKkSGWsJGegzCVtOyrXEwFkLx7J+iPaLjuc
aFhD7EM58I4Ig/mNCm7bUmgfIzU45zaIcXHaG/HiWM65S+kAiLf+OV11lOIOxcmm
MvampE+CcZKLue6Drb6qlBj1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5E1qBKfU8YtqIuyRGf3
K1HlZgktKqDOec6NMpAccs61tjGwcQ91W/U2yEEeV6qvGfzR4VCZITtAfc2XKH7M
dHbnd7KO2r8iMhQ9Ak4Os+0tzaMhzd5zgpDP3awt6JjOMTAQTUX3gyNkWqPWnzBr
3/ZjgaDd+3JbP024cXwz4Ec7koG/pr+YVL8ZN/1AJ2bt+NkA37mAO4mGj/3jcFcH
aEiy/XSmstww5/UW1SxW7N2Fc8NUZCTAGVhNvAQ2roYHZ0pZk2DY+xf148IytKLW
im/KBjbZM5atU1RR1jMUL7iAMRFbnUt0dMiBUE99TTLnFaCsA6yxO4PFTrEYAY03
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275935713866380970828796837308521068741638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 08:32:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 08:32:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.30.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24183121768998491978897132519255725411265989247141200137992343645040554771514893664591855576626207665127161811212011488188230888818831558346941503203049755389439167016121081699504021281234892777926816184533749539251984055200831265390201724522778519737845244043408864525707250605866745098508366372237197694633858741335125875510629175033101766570299650093891082437236727471674345791057381662748005368317739776762362926745225900073194485855100450052659946249515781564981350069470648388397626892492499481917607124516710114403751893336261781411177151202469792512321947411167342173080799027080413220240933822938461137352459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ead175846d63f5ff7054abdc51feb4a8014690d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1668 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tractionenable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'application.internationalstudents.sa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.aum.edu.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lefebvre-sarrut.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.tractionondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap0.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.eu27.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na133.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.aakonsult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.am.lombardodier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.centralpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.wolfvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clarabridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.ipc.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.skillsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.1spatial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empresa.cochezycia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enable.tractionondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.guerlain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.virbac-services.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedback.driveconnect.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.doterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpme.englishlive.ef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.doterra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.doterra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.santanderbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locator.bodyshotcigars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'med.nutramigen.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.eusophia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.circles-concierge.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.americanretire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.fullsupportgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.roampayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.roampayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podpora.crmproneziskovky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.tractionpropel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.doterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.30.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.walpoleoutdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce.algebris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpbd.scp-health.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.jobtread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcms.authentic4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverclub.doterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.ajc-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'success.bacasystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.clarabridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workx.bysodexo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmfinanciera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conectabat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lojamosaicco.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noisesolution.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnercollaboration.siemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnerfinder.automation.siemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnerfinder.automation.siemens.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruralhealthpro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steamboatmeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.oxlin.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f0f7366060000040300483046022100c56d8f8fa876de71ddc4c5afc52f4ed8aa333ab33acb36cc586083b27fcea15c02210089463aeda6e24f4963bb8cb9830f32e7ae807cb631164ff4a4e0e2f3104726740077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0f73660e000004030048304602210092ecfa4da2b5ba4d753abac1dc6f18de067878c8f4d57daf0d684cb2e8cc5996022100dc8f192d0e8ef51ef778e9ba5f9a34be0cb3db176c75c8596407e696eac98570
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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