g2.shared.global.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 7c:bb:3a:fd:e5:60:9a:77:bb:39:ed:fa was issued on by GlobalSign nv-sa.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:bb:3a:fd:e5:60:9a:77:bb:39:ed:fa
Serial Number (int): 38602488926925361736964500986
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 49:a7:84:70:de:c1:83:2b:2c:81:b9:53:8a:71:86:57:6d:94:59:42
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 04:2c:4b:0c:bb:5f:26:6e:e7:8d:dd:b5:6d:1b:1a:48:b1:6e:d4:3a
Fingerprint (sha256): 06:2b:18:96:39:64:39:91:de:f0:26:19:d6:ec:4a:fc:6a:35:f8:0a:8b:27:4f:1c:b3:e8:cf:c0:5f:cf:ec:ab

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate g2.shared.global.fastly.net

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for g2.shared.global.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

g2.shared.global.fastly.net
*.admailtiser.com
*.apartmenttherapy.com
*.apttherapy.net
*.basebanner.com
*.bedandbreakfast.com
*.cbarsrv.com
*.clicksend.net
*.cubbyathome.com
*.curate.schibsted.media
*.disqus.com
*.donorschoose.net
*.donorschoose.org
*.editorial.forbes.com
*.everesttech.net
*.forbes.com
*.forbesadvisor.com
*.fs.adoveo.com
*.fs.greatwithtalent.net
*.fs.liondemand.com
*.fs.teamsynced.com
*.geniale.com
*.gensler.com
*.gocmsrv.com
*.graphcms.com
*.greenhouse.io
*.hmwy.io
*.homeawayconnect.com
*.medallia.com
*.modcloth.com
*.percipio.com
*.qa.experiencepoint.com
*.rushlimbaugh.com
*.saleae.com
*.staging.saleae.com
*.staging.zeit.de
*.student.com
*.taboola.com
*.teracreative.com
*.thekitchn.com
*.tubemogul.com
*.usconcealedcarry.net
*.vrbo.io
*.webflowtest.io
*.westburyfinewine.com
*.westburywineandspirits.com
*.westburyws.com
*.wfm.com
*.wonderbly.com
*.zeit.de
*.zorosrv.com
admailtiser.com
api.twizoo.com
assets.kgn.io
bedandbreakfast.com
blogs.biomedcentral.com
cbarsrv.com
cdn.rangetouch.com
cdn.shr.one
charitywateruk.org
clicksend.net
colorfulcompany.jp
content.gamefuel.info
cubbyathome.com
donorschoose.net
donorschoose.org
fatherlyatwork.com
forbesadvisor.com
fs.adoveo.com
gocmsrv.com
greenhouse.io
hmwy.io
hosting.videomize.tv
iriam.com
jenkins.io
lbcdn.staging.6cloud.fr
lbcdn.staging.salto.fr
liondemand.com
media.paulsmith.com
modcloth.com
modcloth.net
onairhls.thaitellycdn.com
purest-cbdoil.com
resources.be.bookingdirect.com
rushlimbaugh.com
saleae.com
services.premierenetworks.com
staging-registry.terraform.io
staging.colorfulcompany.jp
staging.saleae.com
staging.zeit.de
student.com
teracreative.com
topreport.news
trip-tile.citymaps.io
tubemogul.com
tv.iheart.com
vodhls.thaitellycdn.com
vrbo.io
westburyfinewine.com
westburywineandspirits.com
westburyws.com
wfm.com
wistia.st
wonderbly.com
www.brandvoice.com
www.researchandmarkets.com
www.swellbottle.com
zeit.de

Other certificates including the domain name fastly.net

(limited to 100 certificates)
f4.shared.global.fastly.net
f6.shared.global.fastly.net
h2.shared.global.fastly.net
y2.shared.global.fastly.net
g3.shared.global.fastly.net
i3.shared.global.fastly.net
e2.shared.global.fastly.net
m2.shared.global.fastly.net
u2.shared.global.fastly.net
i2.shared.global.fastly.net
n2.shared.global.fastly.net
e.ssl.fastly.net
w2.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o2.shared.global.fastly.net
k3.shared.global.fastly.net
o.ssl.fastly.net
b3.shared.global.fastly.net
*.a.heroku.ssl.fastly.net
o.ssl.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
w2.shared.global.fastly.net
customer-test.ssl.fastly.net
prospective.shared.global.fastly.net
j3.shared.global.fastly.net
k2.shared.global.fastly.net
p2.shared.global.fastly.net
a2.ssl.fastly.net
l3.shared.global.fastly.net
o2.shared.global.fastly.net
h2.shared.global.fastly.net
v.ssl.fastly.net
a3.shared.global.fastly.net
customer-test.ssl.fastly.net
w2.shared.global.fastly.net
g3.shared.global.fastly.net
k3.shared.global.fastly.net
t2.shared.global.fastly.net
prospective.shared.global.fastly.net
i3.shared.global.fastly.net
dns-vetting1j.map.fastly.net
t2.shared.global.fastly.net
p2.shared.global.fastly.net
w2.shared.global.fastly.net
n2.shared.global.fastly.net
t2.shared.global.fastly.net
o2.shared.global.fastly.net
v.ssl.fastly.net
e2.shared.global.fastly.net
w2.shared.global.fastly.net
b3.shared.global.fastly.net
t.ssl.fastly.net
f.ssl.fastly.net
l3.shared.global.fastly.net
c3.shared.global.fastly.net
r.ssl.fastly.net
g3.shared.global.fastly.net
n2.shared.global.fastly.net
l3.shared.global.fastly.net
v2.shared.global.fastly.net
d2.shared.global.fastly.net
j3.shared.global.fastly.net
l3.shared.global.fastly.net
g2.shared.global.fastly.net
e2.shared.global.fastly.net
n2.shared.global.fastly.net
e2.shared.global.fastly.net
k2.shared.global.fastly.net
h2.shared.global.fastly.net
t2.shared.global.fastly.net
p.ssl.fastly.net
a2.ssl.fastly.net
j3.shared.global.fastly.net
k.ssl.fastly.net
i2.shared.global.fastly.net
customer-test.ssl.fastly.net
n2.shared.global.fastly.net
prospective2.shared.global.fastly.net
w2.shared.global.fastly.net
h2.shared.global.fastly.net
u2.shared.global.fastly.net
w2.shared.global.fastly.net
d2.shared.global.fastly.net
b3.shared.global.fastly.net
n.ssl.fastly.net
l.ssl.fastly.net
prospective.shared.global.fastly.net
g2.shared.global.fastly.net
v.ssl.fastly.net
d3.shared.global.fastly.net
a3.shared.global.fastly.net
z.ssl.fastly.net
l2.shared.global.fastly.net
e2.shared.global.fastly.net
h3.shared.global.fastly.net
b2.shared.global.fastly.net
v2.shared.global.fastly.net
c3.shared.global.fastly.net
e2.shared.global.fastly.net

Certificate

The complete raw certificate details for g2.shared.global.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouUSBU5P5vPuoNrDtHyt
Tq652B9G2bCp1fI8sr/EUdhbQ38gZcKOzdsSn/TwLEESGhF/UZZgtwO764PG/x07
0J+lnZDxSXFQugl/BjlwQ/PBm0+fN1LkxxVrlzf6fN3k0kDHfo0fiRAr0c+fYjvE
+2pNYNZbbqOgaIa8MwLazO/4GKVdvVbbe66ODZTM9YsNe5Gyqi22saUDzBwZW0dg
n1Yxgmd9oi3EgvlhwOO67aGEnq1Cban9oqDGJdooIKQBNmOkEls8DXJ00OadrPHF
LfXyfL8Tw3S0sM/TOnrjW/g7PBEDYVoAv6kR9122BGgkVa5AORZp929+ajhqYlQU
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38602488926925361736964500986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-12 10:58:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-25 20:01:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'g2.shared.global.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20563564225550381765136978563481723765305251219363641530345875784643557654575701944554600239793651097404184279544473682879671411144741059427376520819771531431477747726987973767879243067569213857809340392090319945622550252854692909380274656160175149253404093354720118849994817301094790044443017153194748181212704929261230818102803356107754923805253452227962176116573290963066128129356562621200366035947723768934228829689625159825786531360621126062763278386029798796692435278361810349867040415481976025093270945340955546101759374690095307337703013360141803724844698616076262038535903325556332067434465002557536648565973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2022 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g2.shared.global.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admailtiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartmenttherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apttherapy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basebanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbarsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clicksend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubbyathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curate.schibsted.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disqus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editorial.forbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everesttech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbesadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.adoveo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.greatwithtalent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.liondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs.teamsynced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geniale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gocmsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphcms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmwy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeawayconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medallia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modcloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.percipio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.experiencepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rushlimbaugh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.student.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taboola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teracreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekitchn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usconcealedcarry.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrbo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webflowtest.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westburyfinewine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westburywineandspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westburyws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wonderbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zorosrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admailtiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.twizoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.kgn.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedandbreakfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.biomedcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbarsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rangetouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.shr.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitywateruk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clicksend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorfulcompany.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.gamefuel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubbyathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorschoose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donorschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatherlyatwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbesadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.adoveo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gocmsrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhouse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmwy.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosting.videomize.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iriam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbcdn.staging.6cloud.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbcdn.staging.salto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liondemand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.paulsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modcloth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modcloth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onairhls.thaitellycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purest-cbdoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.be.bookingdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rushlimbaugh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.premierenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-registry.terraform.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.colorfulcompany.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.saleae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.zeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teracreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topreport.news'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip-tile.citymaps.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubemogul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.iheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodhls.thaitellycdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrbo.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westburyfinewine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westburywineandspirits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westburyws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wistia.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderbly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brandvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.researchandmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swellbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeit.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49a78470dec1832b2c81b9538a7186576d945942
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001751c762e000000040300463044022064c91dd32d0fd742672b463a71bbcbed5727ba15c46793ca39772b748128f86e02205485d2f90b5c389ea3db66fea4fcfd433e0c06be3a603aefe3a8deec5622d0cf007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001751c762ddf0000040300483046022100d2065058a9c75996372c53fbe964607b12d3e80e0a0eac50902750b846518f5002210096b9c3835e8d57078db66aaa6442d0390e348d1f3d49082c30ae9d8e1752e115
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00472a8472c117b1d8731b7a10621944a64f07b0fa8a9650caf60f083e177189ed57ba3e857b8c4ae579735558ac2342fc1ab38048560ec18e68ffcb1062fc04c25a37445f53c86c27678eddbbe8378c98f3b43df7976b09f61d70da9dff38dc6c0257f6acdfc3e9399e226a8339342db80af0b5b62ccb47b3df9de3d9c748e4dc8ecd1eab9c8be208b33f94ba7377cb086d6b96d586b9eb54a6b9331c0c39ad3d83b0404ac4fd91987e47ed2bf7b6c9a28429729e164c94ece371cda50725d674af11cb76fcae5dffc9e8f44511a2b2568c76c2bb2070f40fab94906aec6cbe37499f025a4ef450fdf54d38d84876d4f50e053e5f529cceeeb6fa70edc5827d68