y2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7d:70:8c:16:d8:85:35:de:e9:ab:2a:2a was issued on by GlobalSign nv-sa.

With 120 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:70:8c:16:d8:85:35:de:e9:ab:2a:2a
Serial Number (int): 38821687472202879145719048746
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 40:39:2c:bd:1b:5b:09:5d:4d:c3:de:00:77:5e:81:97:23:0e:8d:f5
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): c6:aa:3b:78:0d:59:fc:4c:e1:2b:83:82:e9:26:58:10:fc:05:bc:e5
Fingerprint (sha256): 03:5e:f3:80:de:ff:f8:33:11:9e:1a:fb:93:b6:c0:c0:85:0f:84:24:12:d4:4e:c1:2c:f3:a1:10:c0:7b:c0:b3

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate y2.shared.global.fastly.net

120

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for y2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

y2.shared.global.fastly.net
*.anywhereindonesia.com
*.anywheremyanmar.com
*.askwonder.com
*.atlantagladiators.com
*.atvstatic.com
*.bramptonbeast.com
*.byteoversea.com
*.copa90.com
*.crowdfiber.io
*.cue.ebisubook.com
*.echlthunder.com
*.haaretz.co.il
*.haaretz.com
*.kwings.com
*.legendsinternational.com
*.makewithprism.com
*.masteryconnect-demo.com
*.masteryconnect-staging.com
*.masteryconnect.com
*.nlgrowlers.com
*.norfolkadmirals.com
*.noujoumtounes.com
*.on-dev.com
*.palantir.fr
*.rapidcityrush.com
*.releventsportsgroup.com
*.royalshockey.com
*.stingrayshockey.com
*.themarker.com
*.tlaus.com
*.toledowalleye.com
*.topbuzzcdn.com
*.wheelingnailers.com
ablink.empowered.roadid.com
ablink.fistbump.roadid.com
account.fineproxy.org
aircon-okaidoku.com
anywhere.com
app.split.io
askwonder.com
assets.myadmessenger.com
atlantagladiators.com
bramptonbeast.com
buttercms.com
cdn.myadmessenger.com
cdn.thescroller.com
championshockeyleague.com
chemmate.co.nz
cntnt.idgconnect.com
config.gorgias.io
copa90.com
cue.moneyforward.com
e.thegourmet.com.au
echlthunder.com
edt.greenbot.com
edt.idgeinsider.com
edt.javaworld.com
edt.macworld.com
edt.networkworld.com
edt.pcworld.com
edt.techconnect.com
edt.techhive.com
email.culturevulture.de
email.handymanmatters.com
email.thehorse.com
enews.cafeappliances.com
enews.geappliances.com
enews.haierappliances.com
enews.hotpoint.com
enews.monogram.com
events.netcentric.biz
exchange.cue.moneyforward.com
fastly.wovnio.com
fis-ski.com
fisski.com
haaretz.co.il
haaretz.com
ical.float.com
images.haarets.co.il
images.newscientist.com
images.newscientistbeta.com
js.avocandocdn.com
kwings.com
legendsinternational.com
nlgrowlers.com
norfolkadmirals.com
palantir.fr
pxlctl.as.com
pxlctl.elpais.com
rapidcityrush.com
releventsports.com
releventsportsgroup.com
royalshockey.com
safcodental.com
staging-fastly.wovnio.com
staging.photos.com
staging.vinoshipper.com
stingrayshockey.com
themarker.com
toledowalleye.com
wheelingnailers.com
www-stage.netcentric.biz
www.actionagainsthunger.org.uk
www.aemconnector.com
www.aircon-labo.net
www.allting.com
www.chemmate.co.nz
www.elitesarms.com
www.float.com
www.flooranddecor.com
www.ncregister.com
www.netcentric.cat
www.newscientistbeta.com
www.photos.com
www.raleighrealtyhomes.com
www.releventsports.com
www.safcodental.com
www.totalmerchandise.co.uk
xn--08j2fxcxa0d6wy18otram37a2kz.net

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for y2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIaTJfF0Io/JrEBnrbLl
t3dfKyuPSNXJ5NEP0542v34P03Z+n0lMjdmIG6M5OsVZbDF4hYaSQIpMfRetQnII
z8YLQwXn4kW93XjaGvf9CrO2zbLG68PHDeApgV/D48u+rEBMRBqdxXlHyKbHKSxE
QSJcsLA3+/2/wz+5HwHcA3di2RwFOt6sO5aVeZs3qEdyiuQU6I0CK8BGhtU2V4x9
QdDsbgHe0MzRhPimFmGO7wGZ6jmkYQuFueM5vqPQ7TOuLD1bbADbTTcGdTTKNlo5
q+1D/qEvcu92vuJagjbUeFL/E2z9fZ773N14K11BjW2zC8bzpw6l7KK6lvynH7w1
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38821687472202879145719048746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 18:20:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 19:35:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'y2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22789256199964530722184597670080012917938915185873150001403594758928285979634697213258708409260910020226614449279458697517145050492355166166465717268073330305986932361254972372296330802051596275010558468826586122395876947954239014129784770751045233354479024573056824727556875148650316643527337728874702853194869355599789847520159619654761075624454623216136347702685165537980878129908531045489189956193918148579431512540925162152347661780693818803925447896941531427764334596035956336103615250840170057022913932409607632807510974275202999198077599678806076541017534450957527187508746481560267879649461924777486951658769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2492 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anywhereindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anywheremyanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantagladiators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atvstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bramptonbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byteoversea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copa90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowdfiber.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cue.ebisubook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echlthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legendsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makewithprism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect-demo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nlgrowlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkadmirals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noujoumtounes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.on-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palantir.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidcityrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.releventsportsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stingrayshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tlaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toledowalleye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topbuzzcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheelingnailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.empowered.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.fistbump.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.fineproxy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircon-okaidoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.split.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.myadmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantagladiators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bramptonbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buttercms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.myadmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thescroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'championshockeyleague.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cntnt.idgconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.gorgias.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copa90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue.moneyforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.thegourmet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echlthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.greenbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.idgeinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.culturevulture.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.handymanmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.cafeappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.geappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.haierappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.hotpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.monogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.cue.moneyforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.wovnio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fis-ski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ical.float.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.haarets.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.newscientist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.avocandocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlgrowlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkadmirals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palantir.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxlctl.as.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxlctl.elpais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidcityrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releventsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releventsportsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safcodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-fastly.wovnio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.photos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.vinoshipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stingrayshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toledowalleye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelingnailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actionagainsthunger.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aemconnector.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aircon-labo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitesarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.float.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flooranddecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netcentric.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighrealtyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.releventsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safcodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalmerchandise.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--08j2fxcxa0d6wy18otram37a2kz.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40392cbd1b5b095d4dc3de00775e8197230e8df5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001694f15f7890000040300473045022100c78d45b51079a532fef51c2f04e4bbb0fa3993029cf01e7c8df9f6ce8d2eb5b002207445b33af44ec771ce50d456ba13f3da757daf81921ea3867bea7f901f1abade007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001694f15f4650000040300463044022010672ef6f0f1444d2e4cfd5b3a06234a58c44b13e771f7c3747f93a47794e376022035da04d5e299e636a7aec47e904a3b7a3f08571ea73855acb1011fb0d597e421
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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