v2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2d:f3:42:d1:41:28:09:29:b7:fe:5f:cf was issued on by GlobalSign nv-sa.

With 107 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:f3:42:d1:41:28:09:29:b7:fe:5f:cf
Serial Number (int): 14220909952379276470268092367
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1f:45:fb:9c:04:7d:d1:ec:c1:57:a2:ab:f2:48:17:01:5a:4d:5d:37
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 91:d9:5f:b6:8f:bf:ed:1a:88:d2:e9:02:f7:84:47:7d:bc:cd:81:ce
Fingerprint (sha256): 03:27:01:51:6b:0d:e7:67:2d:31:06:e7:bf:12:98:e6:87:a7:74:c3:e6:ca:8f:69:3f:c8:cf:8e:f2:f2:66:f7

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate v2.shared.global.fastly.net

107

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for v2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

v2.shared.global.fastly.net
*.99productrules.com
*.beyondthenest.com
*.buzzfeednews.com
*.ebby.com
*.experience-adobe.com
*.fiddle.fastlydemo.net
*.helix-demo.xyz
*.hypno.cam
*.ikyu.com
*.insider-inc.com
*.kahoot-experimental.it
*.murtr.businessinsider.com
*.murtr.thisisinsider.com
*.phillyvoice.com
*.primordialsoup.life
*.rodalesorganiclife.com
*.sherpadm.com
*.sherpadmstage.com
*.staging.infura.org
*.thehill.com
*.trendhim.fr
*.trendhim.ru
amzwssl8-clicktale.pw
api.kimfamilytravel.com
beta-m0.stg-g3fastly-1.gazellestaging.com
beta-m0.stg-g3fastly-3.gazellestaging.com
beta-m0.tst-g3fastly-1.cns.gazelle.com
beta-m0.tst-g3fastly-2.cns.gazelle.com
beta.csave.net
beyondthenest.com
booking.jetsmart.com
buzzfeednews.com
c.gift-land.com
cdn.flyweel.co
cdn.reactual.app
cdn.reactual.io
cdn.static.coinchat.im
cdn2.static.coinchat.im
couponsstation.com
cozwix.com
descuentos.abc.es
descuentos.lavanguardia.com
edge.papi.qa.brightcove.com
ezup.com
ezup.de
ezup.eu
ezup.fr
ezup.nl
forbescouncils.com
git.mikeneko.io
hypno.cam
image.nengun.com
insider-inc.com
js.sentry-cdn.com
kimfamilytravel.com
link-experimental.getkahoot.com
link-stage.getkahoot.com
link.kahoot-stage.it
liveuseast.squoia.com
media.naavi.com
media.photolemur.com
media.tbistatic.com
mikeneko.io
nyaa.blog
rdrs.ad-score.com
rodalesorganiclife.com
saddleonline.com
sentry.mikeneko.io
stage.csave.net
staging.rednoseday.com
tc-ru.hometogo.com
testlh.haj.gov.sa
thehill.com
toot.mikeneko.io
weber.ezup.eu
www.chilimath.com
www.ezup.fr
www.gamerworldnews.com
www.gfs.ca
www.gfs.com
www.gift-land.com
www.grail.bz
www.gunbuyer.com
www.kimfamilytravel.com
www.kitachiba-water.or.jp
www.kyureki.com
www.laminarflow.io
www.mikeneko.io
www.nengun.com
www.nyaa.blog
www.rednoseday.com
www.run4it.com
www.saddleonline.com
www.senetic.ca
www.senetic.com
www.stadtwerke-sommerkino.de
www.stg-g3fastly-1.gazellestaging.com
www.stg-g3fastly-2.gazellestaging.com
www.tabicute.com
www.thebasewarehouse.com.au
www.traveler-store.com
www.vaporl.com
www.workyard.com
wwwsit.gfs.ca
wwwsit.gfs.com
yec.co

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for v2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gUwziHTXtysTdEUgBhO
aX9vAqDdtJjJGYtlQTWtry+3aI3fvX6mUblLE1NQ/hoDYQuxZRDKIbLfdqA1V8Vx
kjpInoRPyFArY8nfYLJgopeiprtEu/inmS/Ja2P1dkw25KA1XxHcJPM919aVpOGA
CqBb9UV5GYeHu3OMrDdODDopumPRi8GyWynwymp4/SpyZ3PCZDYW1c+Ivxm8dSFk
ruV3odjIK9mE4q1kzrjwK+VtGPE/ppsI+bie6yYokZO4U5rfXa1WyfYXIBf0WdYK
xjfTc1cl0MmsfQDDCTzNxw8thPFaNCh9TTl1altAKAxViPPf9T/Dqk11wWxDK9yM
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14220909952379276470268092367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 07:11:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 20:22:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'v2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26512603645480608842029288617836350583060703229581310103927746576613142882396818699537390017220448809779152648445687460633835872244485563385945339129382338557903112589403285475319598540235159025753238171344994301690494445882725097695215775444990554015325610344250708687621797310949229018656003103516709072180614476587703410338585305510641894121826529231634535653839747109955981919472576105741883421097313319595532789661721363971267834720682719527510795995505022995612585961910022056692738693498915120409634477482398694727051450606772996678014117515292814410111169552843049002994134072667949970374209157769831644957777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99productrules.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beyondthenest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzfeednews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experience-adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiddle.fastlydemo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helix-demo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypno.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahoot-experimental.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.businessinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.murtr.thisisinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phillyvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primordialsoup.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodalesorganiclife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherpadmstage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.infura.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendhim.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendhim.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amzwssl8-clicktale.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kimfamilytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.stg-g3fastly-3.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-1.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-m0.tst-g3fastly-2.cns.gazelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondthenest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.jetsmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzfeednews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.gift-land.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.flyweel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.reactual.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.reactual.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.static.coinchat.im'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couponsstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozwix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.abc.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descuentos.lavanguardia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.papi.qa.brightcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezup.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbescouncils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.mikeneko.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypno.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.sentry-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimfamilytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-experimental.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-stage.getkahoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.kahoot-stage.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveuseast.squoia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.naavi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.photolemur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.tbistatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikeneko.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyaa.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdrs.ad-score.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodalesorganiclife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saddleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentry.mikeneko.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.csave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rednoseday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tc-ru.hometogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testlh.haj.gov.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toot.mikeneko.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weber.ezup.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chilimath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ezup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gamerworldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gift-land.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grail.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gunbuyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimfamilytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kitachiba-water.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kyureki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laminarflow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mikeneko.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyaa.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rednoseday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.run4it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saddleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senetic.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.senetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadtwerke-sommerkino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-1.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg-g3fastly-2.gazellestaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabicute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebasewarehouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.traveler-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaporl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsit.gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yec.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f45fb9c047dd1ecc157a2abf24817015a4d5d37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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