y2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 3d:aa:13:ee:42:5a:ed:71:e8:ee:5b:4d was issued on by GlobalSign nv-sa.

With 116 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:aa:13:ee:42:5a:ed:71:e8:ee:5b:4d
Serial Number (int): 19084197108506195245946264397
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 40:39:2c:bd:1b:5b:09:5d:4d:c3:de:00:77:5e:81:97:23:0e:8d:f5
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 29:ca:27:ed:de:41:ca:bb:a5:1b:9d:ed:16:1b:6e:22:5e:d2:53:ae
Fingerprint (sha256): 05:bc:ff:7b:10:47:f7:a3:43:e4:47:f2:f5:be:61:68:16:7f:cf:45:79:9c:ad:b9:c9:16:09:08:bb:99:b1:bd

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate y2.shared.global.fastly.net

116

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for y2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

y2.shared.global.fastly.net
*.anywhereindonesia.com
*.anywheremyanmar.com
*.askwonder.com
*.atlantagladiators.com
*.atvstatic.com
*.bramptonbeast.com
*.byteoversea.com
*.copa90.com
*.crowdfiber.io
*.echlthunder.com
*.haaretz.co.il
*.haaretz.com
*.kwings.com
*.legendsinternational.com
*.makewithprism.com
*.masteryconnect-demo.com
*.masteryconnect-staging.com
*.masteryconnect.com
*.merpay-sandbox.com
*.merpay.in
*.nlgrowlers.com
*.norfolkadmirals.com
*.noujoumtounes.com
*.on-dev.com
*.palantir.fr
*.rapidcityrush.com
*.royalshockey.com
*.sec.merpay.ninja
*.stingrayshockey.com
*.themarker.com
*.tlaus.com
*.topbuzzcdn.com
*.wheelingnailers.com
ablink.empowered.roadid.com
ablink.fistbump.roadid.com
account.fineproxy.org
aircon-okaidoku.com
anywhere.com
app.split.io
askwonder.com
assets.myadmessenger.com
atlantagladiators.com
bramptonbeast.com
buttercms.com
cdn.myadmessenger.com
cdn.thescroller.com
chemmate.co.nz
cntnt.idgconnect.com
config.gorgias.io
copa90.com
cue.moneyforward.com
dev.chemmate.co.nz
e.thegourmet.com.au
echlthunder.com
edt.greenbot.com
edt.idgeinsider.com
edt.javaworld.com
edt.macworld.com
edt.networkworld.com
edt.pcworld.com
edt.techconnect.com
edt.techhive.com
email.culturevulture.de
email.handymanmatters.com
email.thehorse.com
enews.cafeappliances.com
enews.geappliances.com
enews.haierappliances.com
enews.hotpoint.com
enews.monogram.com
events.netcentric.biz
fastly.wovnio.com
fis-ski.com
fisski.com
haaretz.co.il
haaretz.com
ical.float.com
images.haarets.co.il
images.newscientist.com
images.newscientistbeta.com
js.avocandocdn.com
kwings.com
legendsinternational.com
nlgrowlers.com
norfolkadmirals.com
palantir.fr
photos.selio.com
rapidcityrush.com
royalshockey.com
safcodental.com
staging-fastly.wovnio.com
staging.photos.com
staging.vinoshipper.com
static.selio.com
static.web.selio.com
stingrayshockey.com
themarker.com
userscdn.selio.com
wheelingnailers.com
www-stage.netcentric.biz
www.actionagainsthunger.org.uk
www.aircon-labo.net
www.allting.com
www.chemmate.co.nz
www.elitesarms.com
www.float.com
www.flooranddecor.com
www.leapingbunny.org
www.ncregister.com
www.newscientistbeta.com
www.photos.com
www.raleighrealtyhomes.com
www.safcodental.com
www.totalmerchandise.co.uk
xn--08j2fxcxa0d6wy18otram37a2kz.net

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u.sni-741-default.ssl.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net

Certificate

The complete raw certificate details for y2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIaTJfF0Io/JrEBnrbLl
t3dfKyuPSNXJ5NEP0542v34P03Z+n0lMjdmIG6M5OsVZbDF4hYaSQIpMfRetQnII
z8YLQwXn4kW93XjaGvf9CrO2zbLG68PHDeApgV/D48u+rEBMRBqdxXlHyKbHKSxE
QSJcsLA3+/2/wz+5HwHcA3di2RwFOt6sO5aVeZs3qEdyiuQU6I0CK8BGhtU2V4x9
QdDsbgHe0MzRhPimFmGO7wGZ6jmkYQuFueM5vqPQ7TOuLD1bbADbTTcGdTTKNlo5
q+1D/qEvcu92vuJagjbUeFL/E2z9fZ773N14K11BjW2zC8bzpw6l7KK6lvynH7w1
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19084197108506195245946264397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-03 08:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 19:35:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'y2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22789256199964530722184597670080012917938915185873150001403594758928285979634697213258708409260910020226614449279458697517145050492355166166465717268073330305986932361254972372296330802051596275010558468826586122395876947954239014129784770751045233354479024573056824727556875148650316643527337728874702853194869355599789847520159619654761075624454623216136347702685165537980878129908531045489189956193918148579431512540925162152347661780693818803925447896941531427764334596035956336103615250840170057022913932409607632807510974275202999198077599678806076541017534450957527187508746481560267879649461924777486951658769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2376 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anywhereindonesia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anywheremyanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantagladiators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atvstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bramptonbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byteoversea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copa90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crowdfiber.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echlthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haaretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legendsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makewithprism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect-demo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect-staging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merpay-sandbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merpay.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nlgrowlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norfolkadmirals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noujoumtounes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.on-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palantir.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidcityrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sec.merpay.ninja'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stingrayshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tlaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topbuzzcdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheelingnailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.empowered.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablink.fistbump.roadid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.fineproxy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircon-okaidoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anywhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.split.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askwonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.myadmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantagladiators.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bramptonbeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buttercms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.myadmessenger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.thescroller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cntnt.idgconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.gorgias.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copa90.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cue.moneyforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.thegourmet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echlthunder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.greenbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.idgeinsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.techconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edt.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.culturevulture.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.handymanmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.thehorse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.cafeappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.geappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.haierappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.hotpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enews.monogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastly.wovnio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fis-ski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haaretz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ical.float.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.haarets.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.newscientist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js.avocandocdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legendsinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlgrowlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfolkadmirals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palantir.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photos.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidcityrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safcodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-fastly.wovnio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.photos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.vinoshipper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.web.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stingrayshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themarker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userscdn.selio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelingnailers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actionagainsthunger.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aircon-labo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chemmate.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elitesarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.float.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flooranddecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leapingbunny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newscientistbeta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raleighrealtyhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safcodental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalmerchandise.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--08j2fxcxa0d6wy18otram37a2kz.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40392cbd1b5b095d4dc3de00775e8197230e8df5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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