prod.22.slot.cdn.salesforce-communities.com

Issued by R3

About this certificate

This digital certificate with serial number 03:50:9f:1c:90:6b:98:76:38:48:c5:7c:a7:23:e4:11:8f:89 was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.22.slot.cdn.salesforce-communities.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:9f:1c:90:6b:98:76:38:48:c5:7c:a7:23:e4:11:8f:89
Serial Number (int): 288770942713789238571308274472925801844617
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:50:65:18:ea:2d:6b:75:83:e4:54:e0:28:00:dc:ae:83:99:21:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:14:8f:6e:17:9a:ac:d2:1d:61:16:f8:8b:74:94:17:7e:fd:cb:10
Fingerprint (sha256): f4:65:11:ae:2b:0c:e3:48:54:33:d8:46:e6:08:49:df:ba:fa:c5:35:e0:99:f1:aa:f7:14:a4:61:c8:cd:fb:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prod.22.slot.cdn.salesforce-communities.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.22.slot.cdn.salesforce-communities.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.aafp.org
app.designschedule.com
beta.dutytocare.info
billinghelp.datto.com
build.ibotta.com
buyer.trimetisls.com
careers.rosetreesolutions.com
cdn.ap21.blitztesting.com
cdn.na115.blitztesting.com
cdn.na66.blitztesting.com
cdn.radleys.co.uk
clientportal.leap.co.uk
clientportal.leap.com.au
clientportal.leap.us
cliniciansupport.propellerhealth.com
cms.schoolinks.com
coda.wiley.com
cognitiveautomation.aeratechnology.com
community.clickability-test.com.au
community.clickability.com.au
community.flexischools.com.au
community.zaliet.com
conquipcustomers.cqegroup.com
content.opencorporates.com
contentcommunity.leaplegalsoftware.com
fans.lightning-seb.com
faq.fair.com
gs01.designportal.ca
hello.energyaspects.com
help.adra.com
help.datto.com
help.leap.co.uk
help.leap.com.au
help.leap.us
help.paramountplus.com
help.stratisiot.com
help.stratisiot.net
help.weedmaps.com
help2.marc-goldstein.com
join.shortsale.co
knowledgebase.statsols.com
marketing.westlakeplastics.com
marriott.lifefitness.com
mijn.ditiswijs.nl
mk.marykayintouch.com.ar
mk.marykayintouch.com.br
mk.marykayintouch.com.co
mk.marykayintouch.com.mx
mk.marykayintouch.com.pe
mk.marykayintouch.com.uy
my.shortsalepilot.com
nook.pathfactory.com
pardot.cloudfocusweekly.com
pardot.reseau-selection.com
pardot.selectionretraite.com
pardot.studentleadershipnetwork.org
partners.magmutual.com
portal.bwalkrealty.com
portal.wollondilly.nsw.gov.au
prod.22.slot.cdn.salesforce-communities.com
remotesetup.leaplegalsoftware.com
sf.padtinc.com
strategy.rosetreesolutions.com
supplier.trimetisls.com
support.paramountplus.com
supportcenter.webablls.net
test1.lookingonward.com
vax4nvclinic.nv.gov
vkgs0shared.blitztesting.com
wbp-admin.wiley.com
wbp.wiley.com
www.1mission.org
www.cloudcompliance.live
www.datto.help
www.embraer-eams.com
www.privacy.cloudcompliance.app
www.privacy.plumcloudlabs.com
www.sampling.meadjohnson.com
www3.woodruffsawyer.com

Other certificates including the domain name salesforce-communities.com

(limited to 100 certificates)
um1-2.cdn.salesforce-communities.com
*.cs109.force.com
*.cs54.force.com
prod.3.slot.cdn.salesforce-communities.com
*.cs55.force.com
*.na151.force.com
prod.4.slot.cdn.salesforce-communities.com
*.na202.force.com
na96-2.cdn.salesforce-communities.com
prod.29.slot.cdn.salesforce-communities.com
o.ssl.fastly.net
*.cs54.force.com
o.ssl.fastly.net
*.na85.force.com
prod.2.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu9-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
prod.6.slot.cdn.salesforce-communities.com
prod.26.slot.cdn.salesforce-communities.com
na35-1.cdn.salesforce-communities.com
prod.9.slot.cdn.salesforce-communities.com
ap6-1.cdn.salesforce-communities.com
*.eu27.force.com
eu18-2.cdn.salesforce-communities.com
*.na242.force.com
gs0-2.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu17-2.cdn.salesforce-communities.com
*.cs30.force.com
ap5-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
*.na127.force.com
prod.35.slot.cdn.salesforce-communities.com
*.cs81.force.com
prod.7.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
prod.34.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
prod.50.slot.cdn.salesforce-communities.com
*.na64.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
*.cs34.force.com
prod.46.slot.cdn.salesforce-communities.com
*.na72.force.com
prod.27.slot.cdn.salesforce-communities.com
prod.7.slot.cdn.salesforce-communities.com
um1-2.cdn.salesforce-communities.com
prod.19.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.16.slot.cdn.salesforce-communities.com
*.na36.force.com
prod.33.slot.cdn.salesforce-communities.com
na21-1.cdn.salesforce-communities.com
prod.4.slot.cdn.salesforce-communities.com
prod.22.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
*.na107.force.com
*.na86.force.com
prod.37.slot.cdn.salesforce-communities.com
prod.18.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
eu26-2.cdn.salesforce-communities.com
mobile1.t.force.com
prod.5.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
eu18-2.cdn.salesforce-communities.com
eu6-1.cdn.salesforce-communities.com
prod.3.slot.cdn.salesforce-communities.com
prod.2.slot.cdn.salesforce-communities.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
00001.salesforce-communities.cdn.t.siteforce.com
*.cs15.force.com
*.cs173.force.com
eu10-1.cdn.salesforce-communities.com
*.eu25.force.com
*.na18.force.com
prod.1.slot.cdn.salesforce-communities.com
prod.49.slot.cdn.salesforce-communities.com
prod.25.slot.cdn.salesforce-communities.com
*.na38.force.com
eu14-2.cdn.salesforce-communities.com
00001.salesforce-communities.cdn.t.siteforce.com
*.na137.force.com
prod.8.slot.cdn.salesforce-communities.com
prod.33.slot.cdn.salesforce-communities.com
prod.16.slot.cdn.salesforce-communities.com
prod.38.slot.cdn.salesforce-communities.com
prod.5.slot.cdn.salesforce-communities.com
prod.35.slot.cdn.salesforce-communities.com
prod.13.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for prod.22.slot.cdn.salesforce-communities.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTVrwcDhgtcwtb9l/BLH
qkgzTnrzRTE9CAy0c9KFEDoF+fwdukBd8AwEl/FSwIQGTv/xo9Ahbe08P/iYkFGC
INIszE1yv1gpCtXMXxwHRg40Of/b21wismG85bvKM/X7/18lPGz7iqQraJQiQ+O7
0PO7tPAkUvT3wSxV7JXiJPy4C1FSzJzBCCE868Z9Gxr112FJAnNtoQRz2dhfZkFf
WFGv1ZC4c6wAksg/tvuN4xlXKGaLYewPLaWbtnqRjU74bceREeYW0c3Qzrqdbjf5
HivW0baEDglJhbLC2qqwszRWBKS2YIzwhYBxKZqdRGNfaF42N3JTqjeIK7ZQftUv
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288770942713789238571308274472925801844617
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-26 14:26:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-24 14:26:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19845756719694909328786762681918835700344030364762123447196064174090932077295671499675391634698888752344903298002117390409985733707355133160386882108234330691343011031278855456289920929398806210378715356101183794451748201038331452159687573626124297871567024223854267670114325503977209436641059951497998004113337183705604993809680100642306207284400193267507381330748301029007579467191244406521637510809217542443742848210914039443757858856398096233512735378303213343842126524247370879095077446517284212901684175417133642045767631333274621575930086353466593112347965897160154443256311182786212087393989658804869097926493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f506518ea2d6b7583e454e02800dcae8399212c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1991 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.aafp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.designschedule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.dutytocare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinghelp.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build.ibotta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyer.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ap21.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na115.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.na66.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.radleys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliniciansupport.propellerhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.schoolinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coda.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognitiveautomation.aeratechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability-test.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.clickability.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.flexischools.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.zaliet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conquipcustomers.cqegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.opencorporates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentcommunity.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fans.lightning-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faq.fair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs01.designportal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.energyaspects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.adra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.datto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.leap.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.stratisiot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.weedmaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help2.marc-goldstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.shortsale.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgebase.statsols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketing.westlakeplastics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.lifefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn.ditiswijs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mk.marykayintouch.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.shortsalepilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nook.pathfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.cloudfocusweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.reseau-selection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.selectionretraite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pardot.studentleadershipnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.magmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.bwalkrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.wollondilly.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.22.slot.cdn.salesforce-communities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotesetup.leaplegalsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.padtinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strategy.rosetreesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplier.trimetisls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.paramountplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportcenter.webablls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test1.lookingonward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vax4nvclinic.nv.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vkgs0shared.blitztesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp-admin.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbp.wiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1mission.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cloudcompliance.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datto.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.embraer-eams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.cloudcompliance.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privacy.plumcloudlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sampling.meadjohnson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.woodruffsawyer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017ae36cc668000004030047304502210092adf2531c5c0d84c2878ba99f350a2dba6b56400c4336f74bc76da87c9cef700220794ac56f21f44b56039919d4883bbf6d5f210d4488e9b99643173e8bb36563b50077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017ae36cc682000004030048304602210092ac3dd51dfbb0f584c400e1f576f564c735448075bf0fcf86cf3c45a9a0bc6b022100f1b3372c018b86336308731b18f954c83fd2f663810c78e988aabfe10565b1e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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