prospective.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 49:e6:89:57:28:f9:08:19:b5:60:5b:e0 was issued on by GlobalSign nv-sa.

With 107 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 49:e6:89:57:28:f9:08:19:b5:60:5b:e0
Serial Number (int): 22871107227496842218444970976
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8d:3d:f8:f4:44:1c:27:2a:0a:7f:8f:1f:b5:dd:d1:49:1b:8f:c2:35
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 86:b0:1f:fd:8e:63:1f:c4:30:10:fa:e7:0c:c9:d8:1d:37:8b:c9:33
Fingerprint (sha256): 03:53:12:97:74:50:a3:8b:5d:98:ff:25:6a:77:d7:62:33:75:ab:57:f7:27:40:4a:68:5f:f7:ea:36:5f:bb:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate prospective.shared.global.fastly.net

107

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prospective.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prospective.shared.global.fastly.net
*.adrise.tv
*.aerlingus.com
*.altcdn.perthnow.com.au
*.altcdn.thewest.com.au
*.aovstats.com
*.apttherapy.net
*.cdn.viaplay.tv
*.demo.fastly-sandbox.ntworkers.com
*.dev.platform.dental
*.eileenfisher.com
*.eurosport.com
*.eurosportshop.com
*.ffx.io
*.fivebelow.com
*.foxnews.com
*.int3.nav.com
*.int3.nav.engineering
*.kueez.yoto.me
*.majorleaguegaming.com
*.medal.tv
*.monday.com
*.mondaystaging.com
*.monoprice.com
*.nav.com
*.njoy.world
*.nme.com
*.nrl.digital
*.nscreen.iptv.bell.ca
*.picsart.com
*.resumehelp.com
*.rtve.es
*.skynewsarabiatv.com
*.staging.broadwaybeta.com
*.usphonebook.com
*.wolfssl.com
*.woodhouseclothing.com
*.wtop.com
*.xalok.com
Uat.uk.virginmoneygiving.com
ablink.empowered.roadid.com
ablink.fistbump.roadid.com
acc-learn-cdn.adobe.com
acc-learn-stage-cdn.adobe.com
advancedbackgroundchecks.com
aovstats.zam.com
api.drivewealth.io
cdn.thingiverse.com
cdn2.yandy.com
cdn6.f-cdn.com
cdntest1.flightnetwork.com
edge.staging.birchbox.com
edge.virtuance.com
fast.brandfolder.io
fast.sirevant.com
fastly-v.storyblocks.com
fastly.jetshop.se
foxnews.com
fs.splay.com
hackday.access.worldpay.io
images.outdoorsy.com
ispot.tv
kueez.yoto.me
manhattanhomedesign.com
manhattanhomedesigns.com
mmm-fastly.stage.sumtotal.host
mobile29.gcontent.eu
njoy.world
nscreen.iptv.bell.ca
omega.xalok.com
pxlctl.as.com
pxlctl.elpais.com
samsung-video.sumtotallab.host
sapqas.canadianhotelsupply.com
stage.footballamerica.com
staging.bevello.com
static.newspeak.app
static.staging.birchbox.com
supporttest.corra.com
team-h-aarpmedicareplans.uhc.com
test.niogbl.com
testgblsite.nio.com
thingiverse.com
tst.ewingirrigation.com
uat-m2.tiemart.com
uk.virginmoneygiving.com
upgrade.hockeymonkey.com
usphonebook.com
video.live.playshow.io
wtop.com
www-staging.autogravity.com
www.advancedbackgroundchecks.com
www.allivet.com
www.breezerbikes.com
www.dicksmith.co.nz
www.dicksmith.com.au
www.freelancer.de
www.freelancer.in
www.kingstonbrass.com
www.kogan.com
www.norwegian.com
www.shop.eurosport.co.uk
www.shop.eurosport.de
www.shop.eurosport.fr
www.tandy.com.au
www.thingiverse.com
www.trustedreviews.com

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for prospective.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E/4ExN0IBAgneYB2MQ6
RZXtI7RH0m9OHXp3W9O4SchlPwCmvt2kKrSYpQl3XAkzYG80ieWWYoFraZJUq3Rx
qA69I5KvFfEXyD/DHOwvb6d5w8N1254qJTrTW6FUAdY1/hD+jBL7jTqAaoZiYQsy
pofKyDFYIMEM8hRJ6DQp43YhGg6+B3wRj6VNUFWQLDKhBt2Lcuwp8sVEBI+fZgqD
F+o+eS1ZRyFPwadPJhhLs/s33g7CPp0FN/fFjK/Y7gIUtUMCiCpT/Gd+sHUWJzJq
Pgq9gzphBXP7c1ZymT7slL1aQG+1vHoq4kz8sjjIh3o4t+GeyLE3m4FNCIol5RXk
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22871107227496842218444970976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 17:07:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 16:25:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'prospective.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29831674175877572130299242064086461729389329219668532618320813390893509462516460809862886844887022740630172855120673400620912440597893493399545862476344360131996267783095838462841472496925310776713508282788828875528459586684019836698439700758937410556372673300192914806783004860147708608987688637212408325943405410154351461990868934110402993007451590923025584690347965736151996988577505091456279443778248606154200342950322003523847629617559059849608117082321097956268695199232564693076140538472658672189633205540554392605729955746760126097549817882516983482753404996173418317269488749589944297600038500484751090377807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2248 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospective.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrise.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altcdn.perthnow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altcdn.thewest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aovstats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apttherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.viaplay.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.fastly-sandbox.ntworkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.platform.dental'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eileenfisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffx.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivebelow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int3.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int3.nav.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kueez.yoto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majorleaguegaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mondaystaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monoprice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njoy.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrl.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nscreen.iptv.bell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picsart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resumehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtve.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skynewsarabiatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.broadwaybeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usphonebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodhouseclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Uat.uk.virginmoneygiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.empowered.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.fistbump.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-learn-cdn.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-learn-stage-cdn.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aovstats.zam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.drivewealth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thingiverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.yandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn6.f-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest1.flightnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.staging.birchbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.virtuance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.brandfolder.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast.sirevant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly-v.storyblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.jetshop.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.splay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackday.access.worldpay.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.outdoorsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispot.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kueez.yoto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattanhomedesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattanhomedesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmm-fastly.stage.sumtotal.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile29.gcontent.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njoy.world'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscreen.iptv.bell.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omega.xalok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxlctl.as.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxlctl.elpais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung-video.sumtotallab.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapqas.canadianhotelsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.footballamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bevello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.newspeak.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.staging.birchbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supporttest.corra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-h-aarpmedicareplans.uhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.niogbl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testgblsite.nio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thingiverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ewingirrigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-m2.tiemart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.virginmoneygiving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upgrade.hockeymonkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usphonebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.live.playshow.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.autogravity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advancedbackgroundchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allivet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.breezerbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicksmith.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dicksmith.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freelancer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingstonbrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwegian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.eurosport.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thingiverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trustedreviews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d3df8f4441c272a0a7f8f1fb5ddd1491b8fc235
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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