customer-test.ssl.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 09:74:a2:3f:7d:84:0b:b1:7f:49:bc:d4 was issued on by GlobalSign nv-sa.

With 101 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 09:74:a2:3f:7d:84:0b:b1:7f:49:bc:d4
Serial Number (int): 2926366678026870937654770900
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 1f:40:b9:02:33:38:02:1c:5f:3d:75:28:6b:ef:b6:10:57:5d:c3:e7
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 46:71:48:50:a7:e2:1e:8f:ce:31:1e:c7:e3:dd:23:27:eb:32:5e:07
Fingerprint (sha256): 00:8f:ee:6e:a9:e7:f7:2b:92:f0:58:34:16:9c:15:a7:9a:6e:98:78:6f:cc:d9:cd:19:8f:8d:9c:2a:97:37:b8

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate customer-test.ssl.fastly.net

101

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer-test.ssl.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer-test.ssl.fastly.net
*.anki.com
*.asana.plus
*.beautiesltd.com
*.beta.asana.plus
*.blovcdn.com
*.channel5.com
*.crm.ondemand.com
*.demosites.net
*.dome9.com
*.fiddle.fastlydemo.net
*.groove.help
*.gu-japan.com
*.hk01.com
*.interactnow.tv
*.intergi.com
*.lumity.com
*.marutainc.com
*.od-cdn.com
*.overstock.com
*.qnap.com
*.s1.b1-prv.qualtrics.com
*.scroll.com
*.sleepingduck.com
*.spot.im
*.sweetwater.com
*.tedcdn.com
*.thehill.com
*.therealreal.ninja
*.tmol.io
*.training.com.au
*.viceops.net
*.votenow.tv
*.whitefoxboutique.com
*.zaplabs.com
api-poc.test.commerce.nikecloud.com
artist.api.lv3.cdn.hbo.com
artist.staging.hurley.lv3.cdn.hbo.com
bustle.com
buzzfeed-res.cloudinary.com
cdn-poc.commerce.nikecloud.com
cdn.kumuapi.com
cdn.optimizely.com
cdn.wineaccess.com
cdn4.1800baskets.com
cdn4.1800flowers.com
cdn4.cheryls.com
cdn4.fanniemay.com
cdn4.fruitbouquets.com
cdn4.harryanddavid.com
cdn4.stockyards.com
cdn4.thepopcornfactory.com
cdn4.wolfermans.com
cds-mobiletickets.eventshopper.com
crm.ondemand.com
dome9.com
es.diffen.com
fastly.3rdsenseclients.com
fastly.aiv-cdn.net
fastly.basebanner.com
fastly.cotopaxi.com
fastly.iodine.com
fastly.theweathernetwork.com
fastview.geoapi-airbusds.com
fcdn-tf.thuuz.com
happyoceanbreeze.com
img2.abcmouse.com
imgfly.jockeyimg.com
leverj-test.tokenry.io
liveplayhd.malimarserver.net
local-store-res.cloudinary.com
lptag-a.liveperson.net
m-fastly.goodrx.com
mcdn-cedexis.awesomenesstv.com
media.codeweavers.com
otfp.engelbert-strauss.com
p4b.cabinetoffice.gov.uk
performance-uat.groupon.com
qa.d8.pega.com
qa.pega.com
qa1.learn.cisco
qa1.standupdeskstore.com
quicken.com
quietriverflow.com
s1.b1-prv.qualtrics.com
sleepingduck.com
ssl-cdn2.thedailyedited.com
talkpointtest.qingcdn.com
testcdn.victoria.ac.nz
thehill.com
ui-qa.learn.cisco
whitefoxboutique.com
www-vpc.younow.com
www.aboutica.com
www.evbqaapi.com
www.fralphatest.com
www.ibuy123.com
www.novonoticias.com
www.quicken.com
www.zazzle.com.au
zazzle.com.au

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for customer-test.ssl.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwq0y6gkUWPqPHRmn10C
pzU68m84+4rsTSWY+tGFYIfR0lVzzJAzbx41qP/cmzPHLdQ5ILVIjbMZRCzh037C
e9sKVTGgw/BNf7aF4UDdTLcKl4jWwjR/NYtj7REIsTWTjoKPwmyndZ/ZcNr6rV50
IGzpdPMcUJPP6rTwDNlpjqCYP3cL4PVidfgDfCjbLywUToHqswhBK7oh2FAmn5Qu
QhmKKZZDUXtOVAsML0fQJb2BoNxy5GWKpHfqmdZKuQX32szesIRSeL86QkpBeFJh
cAoOHJZax6hdTTEW2SHJEbRF9M2LSx59cqzKGxemnLFfz70N4j4pLsaOg7Uf0sp7
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2926366678026870937654770900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-26 16:53:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 14:43:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'customer-test.ssl.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22096982809101153947030613949250330999030549091215330140447899179684566253995336843242858797206311322344079578202954982587822266360668215927230633513486133810723196906877231421479865662309084146106460069284172373458101064812302763541841581050134293379672612210950855462319627123305982075618583458920164953863308056539270057078256454565762721652463760475393506082343626663165158909917690994823356889447786533621641944218914951901950983655988687004833386789665148364459859489716003959348068009701355977658972419734380503148050098204812966602851090210730619443992149889918524799579019253461556635579482439071528808774419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2077 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-test.ssl.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asana.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautiesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.asana.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blovcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channel5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.ondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demosites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dome9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiddle.fastlydemo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groove.help'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gu-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hk01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interactnow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intergi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marutainc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.od-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qnap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s1.b1-prv.qualtrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepingduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spot.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therealreal.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmol.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viceops.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.votenow.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitefoxboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaplabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-poc.test.commerce.nikecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist.api.lv3.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist.staging.hurley.lv3.cdn.hbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bustle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeed-res.cloudinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-poc.commerce.nikecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kumuapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.optimizely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wineaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.1800baskets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.1800flowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.cheryls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.fanniemay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.fruitbouquets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.harryanddavid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.stockyards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.thepopcornfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.wolfermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cds-mobiletickets.eventshopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.ondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dome9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.diffen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.3rdsenseclients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.aiv-cdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.basebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cotopaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.iodine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.theweathernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastview.geoapi-airbusds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcdn-tf.thuuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyoceanbreeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img2.abcmouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgfly.jockeyimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leverj-test.tokenry.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveplayhd.malimarserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local-store-res.cloudinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lptag-a.liveperson.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-fastly.goodrx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdn-cedexis.awesomenesstv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.codeweavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otfp.engelbert-strauss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4b.cabinetoffice.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-uat.groupon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.d8.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.pega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.learn.cisco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.standupdeskstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quietriverflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.b1-prv.qualtrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepingduck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-cdn2.thedailyedited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkpointtest.qingcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcdn.victoria.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui-qa.learn.cisco'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitefoxboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-vpc.younow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aboutica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evbqaapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fralphatest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibuy123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novonoticias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zazzle.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zazzle.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f40b9023338021c5f3d75286befb610575dc3e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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