e2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 5e:d6:7e:aa:ed:71:2c:59:e9:3c:5b:66 was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:d6:7e:aa:ed:71:2c:59:e9:3c:5b:66
Serial Number (int): 29350899219836806433471224678
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: fe:d9:84:02:64:e3:55:fc:2a:3d:9f:10:0b:5f:d0:3f:b6:85:cd:56
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 9e:e2:f2:b5:07:f2:20:5d:ad:0b:f2:fd:f5:bc:6f:3c:80:b6:5f:10
Fingerprint (sha256): 00:f5:78:ac:c2:5b:4f:5e:be:27:96:d6:5f:44:25:5a:a5:3c:b8:3d:2c:77:59:d4:6c:8f:4e:8d:6d:75:c9:76

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate e2.shared.global.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e2.shared.global.fastly.net
*.answersingenesis.ca
*.artibuff.com
*.bridestory.com
*.caf.tv
*.charitywateruk.org
*.chef.sh
*.clayplatform.com
*.ex.co
*.finder.coop.co.uk
*.fortbuff.com
*.fs.rollhq.com
*.habitat.sh
*.hhglobal.com
*.hometalk.com
*.howigetitdone.com
*.ihrint.com
*.intelligencer.com
*.myanswers.com
*.opendesk.cc
*.ourrevolution.com
*.overbuff.com
*.playbuzz.com
*.pre.platform.dental
*.radioedit.ihrint.com
*.reszaiko.com
*.splitsider.com
*.theblaze.com
*.thecity.nyc
*.thecut.com
*.thespring.com
*.thirstbook.com
*.udsrv.com
*.vulture.com
artibuff.com
caf.tv
caff.tv
campaign.lastwordmedia.com
chef.sh
clayplatform.com
comm.plus.net
digital.medallia.com
e.mumbrella.com.au
email.archstl.org
email.ascpa.com
email.b2bdemand-gen.com
email.b2btechinsight.com
email.btobdemandgen.com
email.btobinsights.com
email.btobtechinsight.com
email.btobtechinsights.com
email.cfauk.org
email.culturevulturedirect.co.uk
email.facs.org
email.gardeningclubmail.co.uk
email.orcpa.org
emails.bmj.com
ex.co
finder.coop.co.uk
fortbuff.com
fs.brandfolder.com
fs.rollhq.com
grafana.csnzoo.com
gw-stg-www.edmunds.com
habitat.sh
herokustatus-staging.com
herokustatus.com
hhglobal.com
hometalk.com
howigetitdone.com
ihrint.com
intelligencer.com
kennethreitz.org
mail.a-teaminsight.com
mail.hoseasons.co.uk
mail.spacecenter.org
news.thenewdaily.com.au
newsletter.admin.ox.ac.uk
newsletters.cbc.ca
opendesk.cc
oswego.edu
ourrevolution.com
overbuff.com
preprod.wills.coop.co.uk
px.allmodern.com
px.birchlane.com
replicon.com
seanleach.com
secure.creation.co.uk
secure.img-test-fg.wfcdn.com
secure.img1-fg.wfcdn.com
secure.img2-fg.wfcdn.com
splitsider.com
staging.brainshark.com
static-us-east-2-a-fastly.tv.philo.com
static-us-east-2-staging-fastly.tv.philo.com
stg-www.edmunds.com
theblaze.com
thecity.nyc
thecut.com
thespring.com
thirstbook.com
vulture.com
wills.coop.co.uk
www.awabank.co.jp
www.caleffi.com
www.canadorecollege.ca
www.herokustatus-staging.com
www.herokustatus.com
www.kennethreitz.org
www.netsysops.io
www.sciencelearn.org.nz
www.seanleach.com
www.wills.coop.co.uk
wwwqa.brainshark.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for e2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2riujibTNjpFgM6cE4om
0uWsOGEIgA6qmaAqrUt1RGP4oKjJwQWJBGStF/wULyGWLGEI0Y0yMuGgw07oxEnH
mSwB4LaAtoZDeD+DiSm56lGNqlzNeHaa/hMI0SKjGgTLDbM/tTo8IclgzNT9Yd5i
GPUq9HcAUqLJ7jxpk5ecL57PRqzj0sJ/ycYReckQXU6fDoEA7sP4rLUoHNClA0o9
D1tP7yt2cg4VgqroRbbKpTHBQt/G6pnzqo3Z+oyF60t4E98OSmiTSnOY0lRaawDI
rjGiQg7mC7AiJ6WmTxqak6vVA8hg/w4lfwYojbd9dxQHSyy3OqAqF7/DgalkU3Su
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29350899219836806433471224678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-23 14:46:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-11 17:59:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'e2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27611020500297642520224650598753361995917432357814030432803050646940588523406096137031539365250634106875768629268678101810561247247668895995504485500298678728823081044587895304150950335279025594981209368946368155447612189963947754518074451266398929915824393707857566099294122222644350840551006993025302708375579554928324032060752528610551300376678727268227185743726242666365745890896327570061356875732421326748579276670946043770906376315175932704299582562600211824448457001279834643787415813090812295344481558304583277230409917078297339210241779360538022884271172638732076581123578063305759719583854175406527291371039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answersingenesis.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artibuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridestory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caf.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charitywateruk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chef.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clayplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finder.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortbuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.rollhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habitat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hhglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hometalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howigetitdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelligencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myanswers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opendesk.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overbuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radioedit.ihrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reszaiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.splitsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theblaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecity.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thespring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirstbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artibuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caf.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caff.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.lastwordmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comm.plus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.medallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.mumbrella.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.archstl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.ascpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.b2bdemand-gen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.b2btechinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.btobdemandgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.btobinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.btobtechinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.btobtechinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.cfauk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.culturevulturedirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.facs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.gardeningclubmail.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.orcpa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails.bmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finder.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortbuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.brandfolder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.rollhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.csnzoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gw-stg-www.edmunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitat.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herokustatus-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herokustatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howigetitdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennethreitz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.a-teaminsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hoseasons.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.spacecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.thenewdaily.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.admin.ox.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletters.cbc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendesk.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oswego.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overbuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wills.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.allmodern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'px.birchlane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replicon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seanleach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.creation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.img-test-fg.wfcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.img1-fg.wfcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.img2-fg.wfcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.brainshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-a-fastly.tv.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-us-east-2-staging-fastly.tv.philo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-www.edmunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theblaze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecity.nyc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thespring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirstbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wills.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awabank.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caleffi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadorecollege.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herokustatus-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herokustatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kennethreitz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netsysops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sciencelearn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seanleach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wills.coop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwqa.brainshark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fed9840264e355fc2a3d9f100b5fd03fb685cd56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f9000001737c23ca050000040300473045022100bbaae8de888ba20c089ef0abff90b3edad64c58c77c56ab044339a548f22fc5b022055949b3d59601b9ae5fe5f24241fc4530c67f88e58d88296bdf8980fdc8009b9007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001737c23c9f70000040300483046022100ff6ed49797d27f441ede993c05c9ec08e074136592f723282ecb21f73872b2c5022100bf0b91f26a06ef9d534c86efd5c5ef401decce536ad9ae4569d556d38ccbf27c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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