t2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 6c:21:f3:a8:10:ad:9c:b1:a3:fa:5d:36 was issued on by GlobalSign nv-sa.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:21:f3:a8:10:ad:9c:b1:a3:fa:5d:36
Serial Number (int): 33465426248062680854385286454
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8e:54:a3:6f:ca:fb:bf:40:37:1f:ea:14:20:54:71:4f:69:e8:c3:78
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): f8:a9:b8:f3:1a:ee:63:7f:67:ab:40:14:89:16:cf:5f:42:29:26:8c
Fingerprint (sha256): 02:3c:30:e0:2b:1d:c2:9e:06:26:87:79:a1:9a:3a:57:ec:f4:62:fc:9b:c6:bb:e5:aa:a5:02:d5:8b:6c:c0:1e

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate t2.shared.global.fastly.net

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t2.shared.global.fastly.net
*.aclu.org
*.aqualibi.be
*.belkdev.com
*.bff.fm
*.cartocdn.com
*.cdn.sewest.net
*.clubhouse.io
*.ddev1.worldnow.com
*.dsr.dk
*.dsys1.worldnow.com
*.dua1.worldnow.com
*.filesusr.com
*.franklychat.com
*.goabstract.com
*.gudrunsjoden.com
*.imagesddev1.worldnow.com
*.imagesdsys1.worldnow.com
*.imagesdua1.worldnow.com
*.kaligo.com
*.kc-usercontent.com
*.metanetworks.com
*.outbrainimg.com
*.playbattlegrounds.com
*.rebtel.com
*.rednoseday.org
*.riachuelo.com.br
*.shopflamingo.com
*.stage.metanetworks.com
*.stg.flamingo.harrys.systems
*.streetfighter.com
*.walibi.be
*.walibi.fr
*.watermarkcommunities.com
*.weplaydots.com
*.wixmp.com
accept-39q8ferajdz.espera-supplements.com
accept-39q8ferajdz.espera-supplements.nl
aclu.org
anki.com
api.ethos.io
app.lndr-asia.com
aqualibi.be
assets.demo.leandergames.com
assets.lndr-asia.com
belk.com
belkperf.com
bff.fm
cdn.admix.jauntxr.com
cdn.kumuapi.com
cdn.ryotstudios.jauntxr.com
cdn.sewest.net
cf.machi-ya.jp
cozwix.com
dev-39q8ferajdz.espera-supplements.com
dev-39q8ferajdz.espera-supplements.nl
display.apester.com
dl.flathub.org
dsr.dk
esquire.jp
fastly.cdn.snapcraft.io
fastly.cdn.staging.snapcraft.io
figandbloom.com.au
getshogun.com
goabstract.com
kaligo.com
outbrainimg.com
peteshomemade.com
rc1.api.ethos.io
rc2.api.ethos.io
rebtel.com
rednoseday.org
riachuelo.com.br
shopflamingo.com
simaro.co
staging.api.ethos.io
stockservice-dev.vimeows.com
streetfighter.com
teknikmagasinet.fi
teknikmagasinet.no
teknikmagasinet.se
test.kagg.jp
thoughtbot.co.uk
track.optimizely.com
tw.opera-net.jp
walibi.be
walibi.fr
watermarkcommunities.com
ww2.streetfighter.com
www.abworldtrade.com
www.belk.com
www.belkdev.com
www.belkperf.com
www.bevello.com
www.bobvila.com
www.cargurus.es
www.cargurus.it
www.cityhealthdashboard.com
www.clarksys.com
www.espera-supplements.com
www.espera-supplements.nl
www.figandbloom.com.au
www.h4vuser.net
www.hepcat.se
www.kagg.jp
www.oldies.com
www.opera-net.jp
www.q7.io
www.schaer.com
www.tatari.tv
www.teknikmagasinet.fi
www.teknikmagasinet.no
www.teknikmagasinet.se
www.tivix.com
www.wissen.de

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for t2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCHi9mL88H7QCYNPByvr
vqacUIOT4cj65O72Gm4b4cK+xXvbAIMjCta4DW0YnxDL0DRt8ckINcuqu6JjHP5b
zxeJERlr0vypU9/EpRRHOTa3P8wfupbHwcnZg1CUTHV+kpnJtCvr+eJ6srU/8IfG
BfEvZE/XHulMJLwWsN5FQ8fkceq5Xbc1gnC6cxiRlLVaz5W2RYlXoZTaUX8NzeGH
egDNt4d7JIic+lwWRcWDO0S5fKcjmFYSJ3BWp9YH3oVGlNAEovetu3NEpu59OTU4
1QEnCxLmp1tp3sSMP09pcChIFLJ5TvWl579mULG1gbhGop5JOYH6aBnuecyT9FOY
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33465426248062680854385286454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 14:36:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 13:21:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 't2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25769324304553495944867992577083194451807358649028931453533811235711297632117358535519495108856552039928267877578240574888068469289904184699666461785922541158289312118970819390259568269738813604544715165908896239709613305387308218727887510263753764948377649442590013065371999832206462023562801613064693018610583891381765883100866879976855745902220566587096970251918740722245037971061246510430250034864409666207926444269304652097519763955406736358481234191071564200629778232406433634374312444113098729945773565743001100537283862562418166257816976063109908600196699423498419884852055857212412025677335005274447780485267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqualibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bff.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.sewest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filesusr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franklychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gudrunsjoden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesddev1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesdsys1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imagesdua1.worldnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kc-usercontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outbrainimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playbattlegrounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rebtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rednoseday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riachuelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopflamingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.metanetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.flamingo.harrys.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetfighter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walibi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watermarkcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weplaydots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wixmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accept-39q8ferajdz.espera-supplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accept-39q8ferajdz.espera-supplements.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aclu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lndr-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqualibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.demo.leandergames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.lndr-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belkperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bff.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.admix.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.kumuapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ryotstudios.jauntxr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sewest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.machi-ya.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozwix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-39q8ferajdz.espera-supplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-39q8ferajdz.espera-supplements.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'display.apester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.flathub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsr.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esquire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cdn.snapcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.cdn.staging.snapcraft.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figandbloom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getshogun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goabstract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaligo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outbrainimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peteshomemade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc1.api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rc2.api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebtel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rednoseday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riachuelo.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopflamingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simaro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.api.ethos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockservice-dev.vimeows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetfighter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknikmagasinet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.kagg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtbot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.optimizely.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.opera-net.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walibi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watermarkcommunities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.streetfighter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abworldtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belkdev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belkperf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bevello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bobvila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargurus.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargurus.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityhealthdashboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarksys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espera-supplements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espera-supplements.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.figandbloom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.h4vuser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hepcat.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kagg.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opera-net.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.q7.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatari.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teknikmagasinet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tivix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wissen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e54a36fcafbbf40371fea142054714f69e8c378
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000164752c0e3a00000403004830460221008235b20b125cc0c43fa1679de52cea10432bf56a234a370bf227889d4bdd7330022100ffa61f1f0736ffe9ef9c6f13b1c8f3873f69528a87599463684ad4abf763fbcf0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164752c0dd50000040300473045022100bfa93141b51858f740ccd9057a3cecfc5bc13848cb290b7076b315f4fb50ff06022046c8c6d24949f855e935560fa09afaf8c4a8df7b95548eab8bd0410d5eecff52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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